HelioHost Posted February 16 Posted February 16 Username: softhauz, Server: Morty, Main domain: softhauz.caHi, I have received it myself and did a bit of my own investigation. My address is being targeted and the real domain being used is your-email@yourdomain.com / your-email@yourowndomain.com. Outlook even shows my own email address on display, even when hovered --- the real address only shows when you hit REPLY. I'm already using Thunderbird and Outlook clients. My sent mails are monitored so the spams are confirmed not to come from my local ones. The last dated mail sent from karen.urate@softhauz.ca email was on January 19th. If it's showing otherwise from your end, it would most likely mean your server is compromised or the packets are continually hijacked ? I'm confident you can resolve this. All forwarding on all softhauz.ca emails have been disabled. I'll be looking into Gmail or other specialized email service to handle the softhauz.ca email in the future. For now, I will continue to use it as per need basis. Thank you, Karen U. ________________________________ From: HelioHost Sent: Sunday, February 15, 2026 9:14 AM To: softhauz@outlook.com ; karen.urate@outlook.com Subject: Fwd: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hello, It looks like you're forwarding emails from softhauz.com to your outlook.com email address. Unfortunately someone sent a phishing email to your softhauz.com email address and our Morty server forwarded it to outlook.com. Since outlook received the email from Morty we got the spam report. When people forward emails like this to gmail, outlook, yahoo, etc it negatively affects the reputation of our shared Morty IP meaning all of the emails sent from other Morty accounts also lose reputation which makes them more likely to get delivered to spam. Your email sending privileges have been revoked until you disable the forwarding. We recommend using a mail client like Thunderbird, or the webmail provided by Plesk at webmail.softhauz.com to connect directly to Morty and read the emails there rather than forwarding the spam elsewhere which ruins Morty's reputation. If the spam and phishing emails get delivered to Morty, but don't get forwarded anywhere then there is no reputation loss. If you don't need to send emails from softhauz.com we can just leave email sending disabled. HelioHost https://heliohost.org https://helionet.org ---------- Forwarded message --------- From: > Date: Sat, Feb 14, 2026 at 11:13?PM Subject: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 To: > We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From staff@hotmail.com Sat Feb 14 21:13:13 2026 Return-Path: > X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from mail.he.net (mail.he.net [216.218.186.2]) by abuse.he.net (Postfix) with ESMTPS id 921221EA07F3 for >; Sat, 14 Feb 2026 21:13:11 -0800 (PST) Authentication-Results: abuse.he.net; dkim=pass reason="2048-bit key; insecure key" header.d=hotmail.com header.i=@hotmail.com header.b=IR13MwQc; dkim-adsp=pass; dkim-atps=neutral Authentication-Results: mail.he.net; dkim=pass (no signature error) header.i=@hotmail.com header.s=selector1 header.b=IR13MwQc; spf=pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) smtp.mailfrom=staff@hotmail.com smtp.helo=CY7PR03CU001.outbound.protection.outlook.com; arc=fail (missing parameter(s) in ARC seal data) smtp.remote-ip=52.103.7.21 X-ARC-Results: fail X-SPF-Results: pass Received-SPF: pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) client-ip=52.103.7.21; envelope-from=staff@hotmail.com; helo=CY7PR03CU001.outbound.protection.outlook.com; X-DKIM-Results: pass Received: from CY7PR03CU001.outbound.protection.outlook.com (mail-westcentralusazolkn19010021.outbound.protection.outlook.com [52.103.7.21]) by he.net with ESMTPS (TLS_AES_256_GCM_SHA384:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(256):Mac=AEAD) for >; Sat, 14 Feb 2026 21:13:10 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Vt9G4u/7uAuH0jtJfDta7nxLrhRaW7la7FmOnFxGC/D0cFkcodNxH0rs4rGdY1RCBOKyTRC74p46V3ucvXbBC4zQRvjzjouD//6TOPC4seY6M6gnBCQ8hF8gbyC1FepYadmqioKLNsPVsEBEgAlpejtwrpguiAXY3oRdz2wybO2w8n4WF6P9tJPicN3PIIFcx7Wpla0wEIgw7+Q0tJe4QKxJss/xvUxgobi0yuh21tvPbdpDHXZQXVncnx66RfbaR7udLOGW0F4mRLtXSrBor1iCVF/Kp0rg7y0zpqE6C0RqqtECaEW+TuBMsbgOzDZ8uQuqwsw8CvE2C7IJ8Kryiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=iu90WVZR1gGgDoqe6m/M5V3Jl8sYfqUM/MHTDjq2gh/Xl0Z0VPjpYeoDjuwhWSH0ke9WI9XxhcC7FhhULzacqEpk0Ahfuq4pmpoU0A9rRHBVUm6svXVUWYYpmnO3kv5oCe/FYUprWqPoHydFUojzXBP2KsplOQLOmj/03gHvbD7DqP5Ffm+kcbWHIPXZN8wOIXZtlpPUVXSJqgXK0Q4VcxFOjE23pLTrltVxQ3QT1sBy3oFRkVGSsqK/V4vgGpN6gb16lLGE3ltJJShyc++b6lp2sFu9ddBV0ALgqfzTqEy3UfF79EDhb8O62N5foTyrC8a3hwvf9yLVj8x5Z6Qrfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=IR13MwQcpUT+bJZ4PDpdAL/tpdjznVG/VK2L0FqJqDkvHnPSccnIoBhsrr7dn6PTVVj//mY3kVtrr3e5V8vvNfdOXvINb+PmYNJUqyHuYySFHfO6hYNgssVcPMF6IUK3pFm2XFOsmfpcbKbcOZ1e1EYD5AnFmiz+uY9LC7NdWmQCxuKz408RTYx2FPmdH7uvuzv8mnGU5RrWMa/czImmxnlVslKDMRAy4Hkm/Cr/lN8o3EJeTvef/zs7cTWOjlTJZd8fLarIu8vxEYOP3MkM46m0n7322x54exuHOfeOX9I+BrhvPn4ylqzQHC5Yg7IW5lTX5T0K48MYHc/O1bisGA== Received: from SN6PR05CA0034.namprd05.prod.outlook.com (2603:10b6:805:de::47) by IA1PR05MB10288.namprd05.prod.outlook.com (2603:10b6:208:44d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.15; Sun, 15 Feb 2026 05:13:03 +0000 Received: from SA2PEPF00001507.namprd04.prod.outlook.com (2603:10b6:805:de:cafe::1e) by SN6PR05CA0034.outlook.office365.com (2603:10b6:805:de::47) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.11 via Frontend Transport; Sun, 15 Feb 2026 05:13:04 +0000 Received: from DM5SVC01SF056 (40.107.211.126) by SA2PEPF00001507.mail.protection.outlook.com (10.167.242.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.12 via Frontend Transport; Sun, 15 Feb 2026 05:13:03 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:D11D7AF2C91409D15AEA63C36DA491BC8A8F84C98C23F7863C81DE4B3AE1DA6D;UpperCasedChecksum:3349511D7D21229FC4B14056C3540AA6F458B1BA6739D64D889A18B9A867D0D4;SizeAsReceived:242;Count:6 Date: Sun, 15 Feb 2026 05:13:00 +0000 From: > Subject: complaint about message from 65.19.154.94 To: > MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="7A1671CA-C394-4D1D-AF56-E1FD206A9E39" X-IncomingHeaderCount: 6 Message-ID: <5b768dcc-6ce9-4e3b-ae0f-304ab109b0f5@SA2PEPF00001507.namprd04.prod.outlook.com> X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SA2PEPF00001507:EE_|IA1PR05MB10288:EE_ X-MS-Office365-Filtering-Correlation-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-Microsoft-Antispam: BCL:0;ARA:14566002|1290799033|8022599003|6092099016|19110799012|461199028|20055399003|3412199025|440099028|26115399003; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?4aCqi5JpnR/nQ5gfnVkBM8TV4TlbH1zHDzYDs7yPJ70wTaxwaWmhcJBwvkqT?= =?us-ascii?Q?40ZFyYgsPcp/XMIRhlOdNRF6JxjZQmBvCrkHmn/8qf4nWcFE5ha5TLnqwLPl?= =?us-ascii?Q?fZKswXBSan1LJI27G3LGz9Df/pPE/FpqGzTiPkXpTZ2w6/ALTV7WFOtXCB6T?= =?us-ascii?Q?hCDqz/3SkWINIU6G+ou0bYEMCOLQG/knrlNlTN6v9CuclfOZzLx95qcmiq+W?= =?us-ascii?Q?IQf3rCj92Rlb/pMbxkQCm6ehYBmPoEfPGabw1gzcu0N9J9YnJkJsc/5KGoEf?= =?us-ascii?Q?RVktDhq1tCcuzdGCTxdt4fbCJsdaXc37dZjDvujWjfxbmsT1im83Z4CwdjTL?= =?us-ascii?Q?wHnsuvI0p4LPeLXsWEBvlYy0Ol3YKBi/OMs3K+4WyxquJYAAS2i++VNRWEp6?= =?us-ascii?Q?+G4p3Wf1opxSeG1Njm9xIFzenprQHgno75vRAZiM45dwPzszh9hJNG9+WShA?= =?us-ascii?Q?b9bfAifmUAZMvMykyOlYiRCeXJW+1xbS+Tijn/0Q3+DPxHl4n9XSZu336Ztp?= =?us-ascii?Q?mWtphuVCktIeZqntgKF55uhVeUJDV5mm9nFLQZgkyGKP1FNsfW1zFdQtEV/b?= =?us-ascii?Q?cpTaooZtDLB1YnX6++1TTuBRNBi344E37BphZHQrha5w6dMj4sJur0hRsMby?= =?us-ascii?Q?90MjK88uN2+/jXUOvci52HXlC12plaGy7Bi76ECO3yFNwuNVusT7+k0AgtFq?= =?us-ascii?Q?rj445YmNMSsavFMhyJ3QYTRWQdXmelKtwJdpvWQnlm7yfubtOfw3dupUB2Kq?= =?us-ascii?Q?5Y+z90Yi290PDTWp1FbUH8SGZrPFkKGuLCFqjhuHRjXZTxgMjt9iLyZvjDLo?= =?us-ascii?Q?jKPIsASg4d8x8QE25oLnf0VqHv5JqKfd4feDXKKN1Z6IyUkEmmCov7p8wn09?= =?us-ascii?Q?w/1mr4f29aHJd5D0Gnqq0qamFn8wT+3yvURtqMXLW3tDhqYMxWPVkOy4xPSa?= =?us-ascii?Q?mx97Epu/oPqhzp/xJJHQWSFcFw9veNNiH73xMsYbjQ4k9a2qlvUL8oIrUXUL?= =?us-ascii?Q?/Al8Oy7MJy3n27xvO945ybD4BgulIAPULiFbAOLKOaBXnmPt49CgBKBHovF7?= =?us-ascii?Q?5xgVRze12tGu3gaMlCBbAk5YvvIukU9SfUX5sDEE1h7icH48dxEe1D70WdBh?= =?us-ascii?Q?rEvEWt637hklWvJHXtq2Eja/vOTslQ2t3Nq6KryCdPKKZWIXQZTb2jAcnkv5?= =?us-ascii?Q?TVuYWXsNCMJONlt1+i502tt0AhxuQheOg3qLh+3G0ubbJS+rtZUnbaJAi3qq?= =?us-ascii?Q?K1Io3i15SKwNC29Cy/7ykSZyqGtFQZo51rNpp2D9EqrJx8UCgLWK9nKrlhwj?= =?us-ascii?Q?rTGeH975KGs7Qhlff64Ec72AFb3amlHUROpmRSR1Q8ALqkauSMhFRmG5Kekx?= =?us-ascii?Q?Q0EzOcOCx8gHBkbraZ+BuCxk2Ws4hDO7KcxmXrBJOwnvLvNOntcCAaVS41LH?= =?us-ascii?Q?JlzHwHEalJHcnBfaLRSkbjfk1OD/bcGKVLXHhK+zdhOaDzXNdo4o9uis9RdC?= =?us-ascii?Q?hLBGqpU+vf8dQ0g=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-c6799.templateTenant X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2026 05:13:03.6950 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF00001507.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB10288 --7A1671CA-C394-4D1D-AF56-E1FD206A9E39 Content-Type: message/rfc822 Content-Disposition: inline X-HmXmrOriginalRecipient: > X-MS-Exchange-EOPDirect: true Received: from DS7PR05MB7447.namprd05.prod.outlook.com (::1) by DM6PR05MB6282.namprd05.prod.outlook.com with HTTPS; Fri, 13 Feb 2026 15:04:44 +0000 Received: from BYAPR08CA0018.namprd08.prod.outlook.com (2603:10b6:a03:100::31) by DS7PR05MB7447.namprd05.prod.outlook.com (2603:10b6:5:2ce::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.14; Fri, 13 Feb 2026 15:04:42 +0000 Received: from MWH0EPF000989E7.namprd02.prod.outlook.com (2603:10b6:a03:100:cafe::de) by BYAPR08CA0018.outlook.office365.com (2603:10b6:a03:100::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.12 via Frontend Transport; Fri, 13 Feb 2026 15:04:40 +0000 Authentication-Results: spf=none (sender IP is 65.19.154.94) smtp.mailfrom=softhauz.ca; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=softhauz.ca;compauth=pass reason=105 Received-SPF: None (protection.outlook.com: softhauz.ca does not designate permitted sender hosts) Received: from morty.heliohost.org (65.19.154.94) by MWH0EPF000989E7.mail.protection.outlook.com (10.167.241.134) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.8 via Frontend Transport; Fri, 13 Feb 2026 15:04:42 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:E3A097D271ACD16B418E79A1DE39BF260DADB0A4A56C3F1EC1DED14F0410A668;UpperCasedChecksum:906A70BB6A35FDDB24BD2EF79B6E42142BD9F602FE04517F97AF77E0344E9511;SizeAsReceived:2576;Count:22 Received: by morty.heliohost.org (Postfix, from userid 30) id 0F4226011276; Fri, 13 Feb 2026 15:04:42 +0000 (UTC) From: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on morty.heliohost.org X-Spam-Flag: YES X-Spam-Level: ******** X-Spam-Status: Yes, score=8.6 required=7.0 tests=FROM_ADDR_WS,RCVD_IN_SBL_CSS, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, RCVD_IN_XBL,RDNS_NONE,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Report: * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [46.185.128.173 listed in zen.spamhaus.org] * 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * 0.0 SPF_NONE SPF: sender does not publish an SPF Record * 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in sa-trusted.bondedsender.org] * 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in bl.score.senderscore.com] * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS * 3.0 FROM_ADDR_WS Malformed From address X-Original-To: karen.urate@softhauz.ca Delivered-To: karen.urate@softhauz.ca Received: from mejuri.com (unknown [46.185.128.173]) by morty.heliohost.org (Postfix) with ESMTP id 4755E6011269 for >; Fri, 13 Feb 2026 15:04:40 +0000 (UTC) Authentication-Results-Original: morty.heliohost.org; spf=fail (sender IP is 46.185.128.173) smtp.mailfrom=contact@mejuri.com smtp.helo=mejuri.com Received-SPF: fail (morty.heliohost.org: domain of mejuri.com does not designate 46.185.128.173 as permitted sender) client-ip=46.185.128.173; envelope-from=contact@mejuri.com; helo=mejuri.com; To: karen.urate@softhauz.ca Subject: ***SPAM*** Wire Invoice Transfer Date: 13 Feb 2026 18:04:31 +0300 Message-ID: <20260213180431.FB50B4B5E83D0C32@mejuri.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Prev-Subject: Wire Invoice Transfer X-PPP-Message-ID: <177099508198.540506.2352998437951488802@morty.heliohost.org> X-PPP-Vhost: softhauz.ca X-IncomingHeaderCount: 22 Return-Path: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-MS-Exchange-Organization-ExpirationStartTime: 13 Feb 2026 15:04:42.3666 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MWH0EPF000989E7:EE_|DS7PR05MB7447:EE_|DM6PR05MB6282:EE_ X-MS-Exchange-Organization-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-UserLastLogonTime: 2/13/2026 3:01:10 PM X-MS-Office365-Filtering-Correlation-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-EOPDirect: true X-Sender-IP: 65.19.154.94 X-SID-PRA: SRS0=CREN=AR=MEJURI.COM=CONTACT@SOFTHAUZ.CA X-SID-Result: NONE X-MS-Exchange-AtpMessageProperties: SA|SL X-MS-Exchange-Organization-SCL: 9 X-Microsoft-Antispam: BCL:0;ARA:1444111002|6120799021|20103052907095|20103052905119|84100799003|13020799006|2700799029|34130799006|32080799006|970799060|461199028|20103052903057|20103052901057|21090799003|22090799003|47200799024|58200799021|20103052916048|20103052902057|20103052906057|20103052914048|20103052904057|20103052908033|5070799012|17110799012|440099028|3412199025|6022199012|26104999006|22062799003|74000799027; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2026 15:04:42.2785 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB7447 X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.6646403 X-MS-Exchange-Processed-By-BccFoldering: 15.20.9611.001 X-Microsoft-Antispam-Mailbox-Delivery: rwl:1;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:I;OFR:TrustedRecipientList;ENG:(5062000311)(920221119095)(90000117)(920221120095)(90005022)(91005020)(91035115)(9050020)(9100341)(944500132)(2008001181)(2008121020)(4810010)(4910033)(10005027)(9810001)(9610028)(9515023)(10112040)(9404095)(9310011)(9220031)(120001)(1110175); X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0tMQ== X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?9wk6LR9cFQGaDDlIB5yWQwg+Ke1JZZMBdAZICN8x+pvfSD9pwMm3TYoT4DDE?= =?us-ascii?Q?FFfe8o1bL0iDbTAaOZSBNwOvSOL4y7IeyYZBFx+4HXDs2BfqUMdItFAlUSNJ?= =?us-ascii?Q?2l8TRu6DpFkAbT53zAIxrqWrhqKiKiuvXrrXhUcJg5LdQzTUOSsF3CrjlglT?= =?us-ascii?Q?qzMDbXtKGnYRcNfGnFjpGnVLdGJfwaatIP1qpXorLrHdZl0ZnWHHgFozChh/?= =?us-ascii?Q?HVLhMnS9CEI+Ds4RE5vDuc5taIZ8ia/KKWZgWebqk46WHSqupD92kDA0VN+D?= =?us-ascii?Q?FKvTUZbUo+5g3EJbqXpHIwijLPS/L1I48AggfB8RCqEV9YXqtJoaYOjd3ZBc?= =?us-ascii?Q?atY6+iGkijKhoasRsgYStu9mgBwBV82BiSMrPtTu3GbwIXIA7oeR6o6V8lDq?= =?us-ascii?Q?iNvCEPTO1lDJmnBqIUcbkODnlj2m2YFUebXIRssL2DAHaRgn4Q8xi/ZTzwQI?= =?us-ascii?Q?tFPqYcio6zEovoIXgLMdzbSRe3ZRQOsvWjbRMlXWvYVKAnrz4sK2yPZUo1Lq?= =?us-ascii?Q?IUnekTN7SRT706UWnMPTAFbZ9M+mKPAqKAhu005g9J+jBDWLwtoSG4Flw6Q/?= =?us-ascii?Q?v0zUEV27NNHESnITneZaYCJnqG2L/G1A0ozZnW7ObqyX0qy4OW06861qhC+/?= =?us-ascii?Q?4qLHRib9vAc9UM4ILymsC/G8KyCiWcA6GNmJ7hZGAs0Fu8+agvGcsu7vnQG4?= =?us-ascii?Q?TxbIijOWxagnCmKGYF7woTG/l4GV5OWzu/XSOJaaU9DpvpTTS/zmcFCb4YMB?= =?us-ascii?Q?zWrKKFWG69O3ZtbscS7GVjfjY/bPaD+1cCSvadBYuZlRNe7cPN3xEP6pbckR?= =?us-ascii?Q?N35nNr5v0Ne4ApO77X9aNaeik0d/sw1ptGY8NI/0c9eKKW3glesbIjINnaNS?= =?us-ascii?Q?G56XsfRbPJMcI5G+mrgnLdORDsvThflnu3+N1XHgl0hMU+SGO44wN51MEc/8?= =?us-ascii?Q?dCsEmmnfpJzVTIzmQvSrB7282A8pJRBDdOHUFTi5ezmYCZKEbMYAhd1As1Uk?= =?us-ascii?Q?e7G9x5sQwZsRxS8Ou7jjQFWkji4I1GQxhUxuH8Sb5tBG6ErwrCOy4XALyksV?= =?us-ascii?Q?U2jMSUXUpte89uFcGY4IM6BQ2xgKoJEZ8c2Vr8AhcPyUMIxdlh+G9lS1szen?= =?us-ascii?Q?A4CL1PlGrSoKKDtVrl0oYki8hV9sVRE1jglLn138Orh9Ft6Is+2aahftwKNS?= =?us-ascii?Q?bK4bsheHMtEBoUDL8p8i8gagBVOB2i+zSP+P8vZIxGw+LUwG6uGjAa7B55dl?= =?us-ascii?Q?qqleODPe5Iw3x0p7RGc3f5vz2mF+/ntaHo5QCrDMvEahKKWj2b0g/yeQ1Lft?= =?us-ascii?Q?55SDMujULCnWr9PEDjLo4oqISfih+NiasVPdC7gRZMlRHIBzRVruLAUgk9Z4?= =?us-ascii?Q?rfKlWjYh1EW90sHw/ygh0Aa1UvXgJ/03b+klVbSnRS85G7MnPgzGgI4V2Wkc?= =?us-ascii?Q?qeyMhYHHeWufb9VPlJbvDIB5VTBPlJIl2WOY2Zd4/V3DJNAzCXJaE4E/Qh6/?= =?us-ascii?Q?Ngh5BlMa1PsyZOivoZGJ+cdUztGXJrjhdPh/c2So8eeXgz3eBVvDUcEsdxwK?= =?us-ascii?Q?mUWO2lb/SreHp/ajeinqgpYYG0ruzhnHbkWzNuitYGqKNk6ZDD9gdycHkNQr?= =?us-ascii?Q?QocUjmajpiqyYwjv5/GtUSBaDOv4EgUDDvwQjD7anoWMUq1Wl+SIKn6RXAH2?= =?us-ascii?Q?dRNBro3ahnOYZm4hW9fJM5mL59kkGewIOGRGJuEltRJewbnI17rCvFBuRIG2?= =?us-ascii?Q?uiDvcIOTmsfvlj15qTVBiC8knlPRlfNSTtt6UyE+QXs7OiKl7dX+ORGYx4sB?= =?us-ascii?Q?ku/0CstBAP8xFkxU36XPoNb4XFhUExsoDIf6abwvs3AbCGhhKsBgxd+1Nasw?= =?us-ascii?Q?dzCwcht/EyyZPD4pJyG2ROSykislj6SYO169cMgglasDTkcXCYWFYYWUEDZ4?= =?us-ascii?Q?NDwSHrI0xQ/PtS7sD0gVF37OFoEw7Vgu1fYfIuA3kkYoZty+dehWmXm9bfVb?= =?us-ascii?Q?wD9uxjHf2I9xsCgi2JEFlsBewqFaBNIwvst0bfNoEDM8dVYJxas/pSkfYzGp?= =?us-ascii?Q?r0C5vwZyXdnf+ZufSMlVYC3lFeUaWamr2198V73w1V06VHFyzJARc9T+Dh6u?= =?us-ascii?Q?3Z1Hnq5hgk1pXV5Vs+jlh+08Qws01gbtWZoN+a9UjYFz4cPoJj9CUPXZzREN?= =?us-ascii?Q?4Id0A8sUjmi/0UwS48yEjRc6UsIPLdmywEfX8ZW7j6v/zXAZoLG8enTf+5nC?= =?us-ascii?Q?7lHdrO9i/+pL5uZTexyJnK7c6Wgpyld9swzie8ugbT8V4FLT5ARbFAFj2duW?= =?us-ascii?Q?5YsPGGIScyP1+Fe+4QjoQ5kNh+kYHlKmcpw1GjFnR+/z+hQUsBtOvOIAH21p?= =?us-ascii?Q?mrOzfAZgw518DUVfetuWyLHphXEXDJpvL8FwZseT6ihsRA0AzyNQaqlLjxra?= =?us-ascii?Q?2/v7PM422cVCgA67r/JMkSddIo/WBWQGMAn0ivw3ykCMYgW+8fM3QLtJSNvj?= =?us-ascii?Q?y+n4A7ds+tU/7Lh5xMAxl+89/hq1M2u6E3y6RcxGy92a6eLTVgoSo+fZ5kgY?= =?us-ascii?Q?yd7eD7pcx1zakt9vJi2zZo+jLjbKRKUPoQa4HsAEfV5phUrY3gT+Umf/QkMJ?= =?us-ascii?Q?XWlEKzkZ8N7NtPflbe5eEPQEXK7nZD69XecxtPgiaU5MDNb+rRttz66pNpdR?= =?us-ascii?Q?zv/TogIQEblg17z+zDUsiucBvtyVULBb8bdfdAoBWRZON36XEOAEHhXIW/Qq?= =?us-ascii?Q?hkP23VOkPwnzgRjFu3t2FvIf7rarJWqc95+CcVoi+Cjy0FcXxUGAFkmat6xL?= =?us-ascii?Q?V1BkX9i3FROCtL4K3H9H3OpiLO1nmUNci/RjIlNp6HFu1U/7u7v7wwa5HKrF?= =?us-ascii?Q?poFhJlNsk+yI5kgc8eKzTp5gpsH/W9EBK/Ir27YinOt4yUIFdCcHiZ2XgoeC?= =?us-ascii?Q?6T+a51HgqOf7+SWKFj4cS8x6o3kFgQvU60hwanqOpuDyUd5vy05PpPlXqjOs?= =?us-ascii?Q?IpgUeqjKmlvB33G1SB2DD9fIP1xDX9Sz9szVv3fJt25xq6tRuPrdVhHt7AY+?= =?us-ascii?Q?a3PGmppUEDFC+93XToCrDKYcvVEho7stDwaqSi3GbhhOph2YUu4Is21MlBGh?= =?us-ascii?Q?cchkvczgeWugyYpHxlC2rQQ+ljutsD+cPEHRpNbcnJ+x3x8aA/PN94TJcyGC?= =?us-ascii?Q?p7Fy+9dZhsRvRRhgJeKN/vViF2+0cmU21tLIf6Mx34uJk7iKoMskpezl3wH5?= =?us-ascii?Q?0y4YOicTbMJmJRgymN0SciwfLRLrz+3tC97PPMmLoJ3IrX67l1FcvuYtdVln?= =?us-ascii?Q?T9OoFKk8MwK1EnoUiWOiGnlKo4bafKTHO6000Mf8H/pJM57Swr6KwbR57Q1W?= =?us-ascii?Q?6j5zPqNUuwnEcjgiXt9nXdGRogqe1QIWvqC2wfWcgq7uFcxbHQtoB7uKGXL3?= =?us-ascii?Q?HY7eYUSmTtB2wnUUt6cFQ0g2DCGVzZ7nyj0bsJYb8XDFQawpW7uz9JdeDFUr?= =?us-ascii?Q?6mXbTIJDKOL3QDe8yDhXu73p9vTrYKdX2TymaFsMkUKTP/zyiapOG6tWofTk?= =?us-ascii?Q?nhTpDJCOhDG8O3/cvz3SPO/kMvjKOAz41JsALxV2?= MIME-Version: 1.0 Dear , Please click the link below to view wire transfer copy https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwatchpro= tectionfilms.com%2FWire_transfer.msi&data=3D05%7C02%7C%7C90210053ef744e9914= ed08de6b11378b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639065918852016= 368%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlA= iOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DiDyPB65G= BP4vvNL3aGMXtbQK1akZP6SVt9Hrsz%2BoYNc%3D&reserved=3D0 Your business is greatly appreciated. Ampak Sportswear Inc=20 8253 Backlick Road Ste B Lorton, Va 22079 phone:(703)861-5210 Website: AMPAKSPORTSWEAR.COM=20 --_002_JMR90210053ef744e9914ed08de6b11378bJunk6390672917730362_-- --7A1671CA-C394-4D1D-AF56-E1FD206A9E39--
HelioHost Posted February 16 Author Posted February 16 Username: softhauz, Server: Morty, Main domain: softhauz.caHere are the screenshots from Outlook client, in case it's useful [cid:9dc8229a-19df-41a8-a595-0c8d249deb02] ________________________________ From: Karen Urate Sent: Sunday, February 15, 2026 4:10 PM To: HelioHost Subject: targeted // Re: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hi, I have received it myself and did a bit of my own investigation. My address is being targeted and the real domain being used is your-email@yourdomain.com / your-email@yourowndomain.com. Outlook even shows my own email address on display, even when hovered --- the real address only shows when you hit REPLY. I'm already using Thunderbird and Outlook clients. My sent mails are monitored so the spams are confirmed not to come from my local ones. The last dated mail sent from karen.urate@softhauz.ca email was on January 19th. If it's showing otherwise from your end, it would most likely mean your server is compromised or the packets are continually hijacked ? I'm confident you can resolve this. All forwarding on all softhauz.ca emails have been disabled. I'll be looking into Gmail or other specialized email service to handle the softhauz.ca email in the future. For now, I will continue to use it as per need basis. Thank you, Karen U. ________________________________ From: HelioHost Sent: Sunday, February 15, 2026 9:14 AM To: softhauz@outlook.com ; karen.urate@outlook.com Subject: Fwd: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hello, It looks like you're forwarding emails from softhauz.com to your outlook.com email address. Unfortunately someone sent a phishing email to your softhauz.com email address and our Morty server forwarded it to outlook.com. Since outlook received the email from Morty we got the spam report. When people forward emails like this to gmail, outlook, yahoo, etc it negatively affects the reputation of our shared Morty IP meaning all of the emails sent from other Morty accounts also lose reputation which makes them more likely to get delivered to spam. Your email sending privileges have been revoked until you disable the forwarding. We recommend using a mail client like Thunderbird, or the webmail provided by Plesk at webmail.softhauz.com to connect directly to Morty and read the emails there rather than forwarding the spam elsewhere which ruins Morty's reputation. If the spam and phishing emails get delivered to Morty, but don't get forwarded anywhere then there is no reputation loss. If you don't need to send emails from softhauz.com we can just leave email sending disabled. HelioHost https://heliohost.org https://helionet.org ---------- Forwarded message --------- From: > Date: Sat, Feb 14, 2026 at 11:13?PM Subject: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 To: > We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From staff@hotmail.com Sat Feb 14 21:13:13 2026 Return-Path: > X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from mail.he.net (mail.he.net [216.218.186.2]) by abuse.he.net (Postfix) with ESMTPS id 921221EA07F3 for >; Sat, 14 Feb 2026 21:13:11 -0800 (PST) Authentication-Results: abuse.he.net; dkim=pass reason="2048-bit key; insecure key" header.d=hotmail.com header.i=@hotmail.com header.b=IR13MwQc; dkim-adsp=pass; dkim-atps=neutral Authentication-Results: mail.he.net; dkim=pass (no signature error) header.i=@hotmail.com header.s=selector1 header.b=IR13MwQc; spf=pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) smtp.mailfrom=staff@hotmail.com smtp.helo=CY7PR03CU001.outbound.protection.outlook.com; arc=fail (missing parameter(s) in ARC seal data) smtp.remote-ip=52.103.7.21 X-ARC-Results: fail X-SPF-Results: pass Received-SPF: pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) client-ip=52.103.7.21; envelope-from=staff@hotmail.com; helo=CY7PR03CU001.outbound.protection.outlook.com; X-DKIM-Results: pass Received: from CY7PR03CU001.outbound.protection.outlook.com (mail-westcentralusazolkn19010021.outbound.protection.outlook.com [52.103.7.21]) by he.net with ESMTPS (TLS_AES_256_GCM_SHA384:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(256):Mac=AEAD) for >; Sat, 14 Feb 2026 21:13:10 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Vt9G4u/7uAuH0jtJfDta7nxLrhRaW7la7FmOnFxGC/D0cFkcodNxH0rs4rGdY1RCBOKyTRC74p46V3ucvXbBC4zQRvjzjouD//6TOPC4seY6M6gnBCQ8hF8gbyC1FepYadmqioKLNsPVsEBEgAlpejtwrpguiAXY3oRdz2wybO2w8n4WF6P9tJPicN3PIIFcx7Wpla0wEIgw7+Q0tJe4QKxJss/xvUxgobi0yuh21tvPbdpDHXZQXVncnx66RfbaR7udLOGW0F4mRLtXSrBor1iCVF/Kp0rg7y0zpqE6C0RqqtECaEW+TuBMsbgOzDZ8uQuqwsw8CvE2C7IJ8Kryiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=iu90WVZR1gGgDoqe6m/M5V3Jl8sYfqUM/MHTDjq2gh/Xl0Z0VPjpYeoDjuwhWSH0ke9WI9XxhcC7FhhULzacqEpk0Ahfuq4pmpoU0A9rRHBVUm6svXVUWYYpmnO3kv5oCe/FYUprWqPoHydFUojzXBP2KsplOQLOmj/03gHvbD7DqP5Ffm+kcbWHIPXZN8wOIXZtlpPUVXSJqgXK0Q4VcxFOjE23pLTrltVxQ3QT1sBy3oFRkVGSsqK/V4vgGpN6gb16lLGE3ltJJShyc++b6lp2sFu9ddBV0ALgqfzTqEy3UfF79EDhb8O62N5foTyrC8a3hwvf9yLVj8x5Z6Qrfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=IR13MwQcpUT+bJZ4PDpdAL/tpdjznVG/VK2L0FqJqDkvHnPSccnIoBhsrr7dn6PTVVj//mY3kVtrr3e5V8vvNfdOXvINb+PmYNJUqyHuYySFHfO6hYNgssVcPMF6IUK3pFm2XFOsmfpcbKbcOZ1e1EYD5AnFmiz+uY9LC7NdWmQCxuKz408RTYx2FPmdH7uvuzv8mnGU5RrWMa/czImmxnlVslKDMRAy4Hkm/Cr/lN8o3EJeTvef/zs7cTWOjlTJZd8fLarIu8vxEYOP3MkM46m0n7322x54exuHOfeOX9I+BrhvPn4ylqzQHC5Yg7IW5lTX5T0K48MYHc/O1bisGA== Received: from SN6PR05CA0034.namprd05.prod.outlook.com (2603:10b6:805:de::47) by IA1PR05MB10288.namprd05.prod.outlook.com (2603:10b6:208:44d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.15; Sun, 15 Feb 2026 05:13:03 +0000 Received: from SA2PEPF00001507.namprd04.prod.outlook.com (2603:10b6:805:de:cafe::1e) by SN6PR05CA0034.outlook.office365.com (2603:10b6:805:de::47) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.11 via Frontend Transport; Sun, 15 Feb 2026 05:13:04 +0000 Received: from DM5SVC01SF056 (40.107.211.126) by SA2PEPF00001507.mail.protection.outlook.com (10.167.242.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.12 via Frontend Transport; Sun, 15 Feb 2026 05:13:03 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:D11D7AF2C91409D15AEA63C36DA491BC8A8F84C98C23F7863C81DE4B3AE1DA6D;UpperCasedChecksum:3349511D7D21229FC4B14056C3540AA6F458B1BA6739D64D889A18B9A867D0D4;SizeAsReceived:242;Count:6 Date: Sun, 15 Feb 2026 05:13:00 +0000 From: > Subject: complaint about message from 65.19.154.94 To: > MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="7A1671CA-C394-4D1D-AF56-E1FD206A9E39" X-IncomingHeaderCount: 6 Message-ID: <5b768dcc-6ce9-4e3b-ae0f-304ab109b0f5@SA2PEPF00001507.namprd04.prod.outlook.com> X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SA2PEPF00001507:EE_|IA1PR05MB10288:EE_ X-MS-Office365-Filtering-Correlation-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-Microsoft-Antispam: BCL:0;ARA:14566002|1290799033|8022599003|6092099016|19110799012|461199028|20055399003|3412199025|440099028|26115399003; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?4aCqi5JpnR/nQ5gfnVkBM8TV4TlbH1zHDzYDs7yPJ70wTaxwaWmhcJBwvkqT?= =?us-ascii?Q?40ZFyYgsPcp/XMIRhlOdNRF6JxjZQmBvCrkHmn/8qf4nWcFE5ha5TLnqwLPl?= =?us-ascii?Q?fZKswXBSan1LJI27G3LGz9Df/pPE/FpqGzTiPkXpTZ2w6/ALTV7WFOtXCB6T?= =?us-ascii?Q?hCDqz/3SkWINIU6G+ou0bYEMCOLQG/knrlNlTN6v9CuclfOZzLx95qcmiq+W?= =?us-ascii?Q?IQf3rCj92Rlb/pMbxkQCm6ehYBmPoEfPGabw1gzcu0N9J9YnJkJsc/5KGoEf?= =?us-ascii?Q?RVktDhq1tCcuzdGCTxdt4fbCJsdaXc37dZjDvujWjfxbmsT1im83Z4CwdjTL?= =?us-ascii?Q?wHnsuvI0p4LPeLXsWEBvlYy0Ol3YKBi/OMs3K+4WyxquJYAAS2i++VNRWEp6?= =?us-ascii?Q?+G4p3Wf1opxSeG1Njm9xIFzenprQHgno75vRAZiM45dwPzszh9hJNG9+WShA?= =?us-ascii?Q?b9bfAifmUAZMvMykyOlYiRCeXJW+1xbS+Tijn/0Q3+DPxHl4n9XSZu336Ztp?= =?us-ascii?Q?mWtphuVCktIeZqntgKF55uhVeUJDV5mm9nFLQZgkyGKP1FNsfW1zFdQtEV/b?= =?us-ascii?Q?cpTaooZtDLB1YnX6++1TTuBRNBi344E37BphZHQrha5w6dMj4sJur0hRsMby?= =?us-ascii?Q?90MjK88uN2+/jXUOvci52HXlC12plaGy7Bi76ECO3yFNwuNVusT7+k0AgtFq?= =?us-ascii?Q?rj445YmNMSsavFMhyJ3QYTRWQdXmelKtwJdpvWQnlm7yfubtOfw3dupUB2Kq?= =?us-ascii?Q?5Y+z90Yi290PDTWp1FbUH8SGZrPFkKGuLCFqjhuHRjXZTxgMjt9iLyZvjDLo?= =?us-ascii?Q?jKPIsASg4d8x8QE25oLnf0VqHv5JqKfd4feDXKKN1Z6IyUkEmmCov7p8wn09?= =?us-ascii?Q?w/1mr4f29aHJd5D0Gnqq0qamFn8wT+3yvURtqMXLW3tDhqYMxWPVkOy4xPSa?= =?us-ascii?Q?mx97Epu/oPqhzp/xJJHQWSFcFw9veNNiH73xMsYbjQ4k9a2qlvUL8oIrUXUL?= =?us-ascii?Q?/Al8Oy7MJy3n27xvO945ybD4BgulIAPULiFbAOLKOaBXnmPt49CgBKBHovF7?= =?us-ascii?Q?5xgVRze12tGu3gaMlCBbAk5YvvIukU9SfUX5sDEE1h7icH48dxEe1D70WdBh?= =?us-ascii?Q?rEvEWt637hklWvJHXtq2Eja/vOTslQ2t3Nq6KryCdPKKZWIXQZTb2jAcnkv5?= =?us-ascii?Q?TVuYWXsNCMJONlt1+i502tt0AhxuQheOg3qLh+3G0ubbJS+rtZUnbaJAi3qq?= =?us-ascii?Q?K1Io3i15SKwNC29Cy/7ykSZyqGtFQZo51rNpp2D9EqrJx8UCgLWK9nKrlhwj?= =?us-ascii?Q?rTGeH975KGs7Qhlff64Ec72AFb3amlHUROpmRSR1Q8ALqkauSMhFRmG5Kekx?= =?us-ascii?Q?Q0EzOcOCx8gHBkbraZ+BuCxk2Ws4hDO7KcxmXrBJOwnvLvNOntcCAaVS41LH?= =?us-ascii?Q?JlzHwHEalJHcnBfaLRSkbjfk1OD/bcGKVLXHhK+zdhOaDzXNdo4o9uis9RdC?= =?us-ascii?Q?hLBGqpU+vf8dQ0g=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-c6799.templateTenant X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2026 05:13:03.6950 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF00001507.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB10288 --7A1671CA-C394-4D1D-AF56-E1FD206A9E39 Content-Type: message/rfc822 Content-Disposition: inline X-HmXmrOriginalRecipient: > X-MS-Exchange-EOPDirect: true Received: from DS7PR05MB7447.namprd05.prod.outlook.com (::1) by DM6PR05MB6282.namprd05.prod.outlook.com with HTTPS; Fri, 13 Feb 2026 15:04:44 +0000 Received: from BYAPR08CA0018.namprd08.prod.outlook.com (2603:10b6:a03:100::31) by DS7PR05MB7447.namprd05.prod.outlook.com (2603:10b6:5:2ce::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.14; Fri, 13 Feb 2026 15:04:42 +0000 Received: from MWH0EPF000989E7.namprd02.prod.outlook.com (2603:10b6:a03:100:cafe::de) by BYAPR08CA0018.outlook.office365.com (2603:10b6:a03:100::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.12 via Frontend Transport; Fri, 13 Feb 2026 15:04:40 +0000 Authentication-Results: spf=none (sender IP is 65.19.154.94) smtp.mailfrom=softhauz.ca; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=softhauz.ca;compauth=pass reason=105 Received-SPF: None (protection.outlook.com: softhauz.ca does not designate permitted sender hosts) Received: from morty.heliohost.org (65.19.154.94) by MWH0EPF000989E7.mail.protection.outlook.com (10.167.241.134) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.8 via Frontend Transport; Fri, 13 Feb 2026 15:04:42 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:E3A097D271ACD16B418E79A1DE39BF260DADB0A4A56C3F1EC1DED14F0410A668;UpperCasedChecksum:906A70BB6A35FDDB24BD2EF79B6E42142BD9F602FE04517F97AF77E0344E9511;SizeAsReceived:2576;Count:22 Received: by morty.heliohost.org (Postfix, from userid 30) id 0F4226011276; Fri, 13 Feb 2026 15:04:42 +0000 (UTC) From: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on morty.heliohost.org X-Spam-Flag: YES X-Spam-Level: ******** X-Spam-Status: Yes, score=8.6 required=7.0 tests=FROM_ADDR_WS,RCVD_IN_SBL_CSS, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, RCVD_IN_XBL,RDNS_NONE,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Report: * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [46.185.128.173 listed in zen.spamhaus.org] * 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * 0.0 SPF_NONE SPF: sender does not publish an SPF Record * 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in sa-trusted.bondedsender.org] * 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in bl.score.senderscore.com] * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS * 3.0 FROM_ADDR_WS Malformed From address X-Original-To: karen.urate@softhauz.ca Delivered-To: karen.urate@softhauz.ca Received: from mejuri.com (unknown [46.185.128.173]) by morty.heliohost.org (Postfix) with ESMTP id 4755E6011269 for >; Fri, 13 Feb 2026 15:04:40 +0000 (UTC) Authentication-Results-Original: morty.heliohost.org; spf=fail (sender IP is 46.185.128.173) smtp.mailfrom=contact@mejuri.com smtp.helo=mejuri.com Received-SPF: fail (morty.heliohost.org: domain of mejuri.com does not designate 46.185.128.173 as permitted sender) client-ip=46.185.128.173; envelope-from=contact@mejuri.com; helo=mejuri.com; To: karen.urate@softhauz.ca Subject: ***SPAM*** Wire Invoice Transfer Date: 13 Feb 2026 18:04:31 +0300 Message-ID: <20260213180431.FB50B4B5E83D0C32@mejuri.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Prev-Subject: Wire Invoice Transfer X-PPP-Message-ID: <177099508198.540506.2352998437951488802@morty.heliohost.org> X-PPP-Vhost: softhauz.ca X-IncomingHeaderCount: 22 Return-Path: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-MS-Exchange-Organization-ExpirationStartTime: 13 Feb 2026 15:04:42.3666 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MWH0EPF000989E7:EE_|DS7PR05MB7447:EE_|DM6PR05MB6282:EE_ X-MS-Exchange-Organization-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-UserLastLogonTime: 2/13/2026 3:01:10 PM X-MS-Office365-Filtering-Correlation-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-EOPDirect: true X-Sender-IP: 65.19.154.94 X-SID-PRA: SRS0=CREN=AR=MEJURI.COM=CONTACT@SOFTHAUZ.CA X-SID-Result: NONE X-MS-Exchange-AtpMessageProperties: SA|SL X-MS-Exchange-Organization-SCL: 9 X-Microsoft-Antispam: BCL:0;ARA:1444111002|6120799021|20103052907095|20103052905119|84100799003|13020799006|2700799029|34130799006|32080799006|970799060|461199028|20103052903057|20103052901057|21090799003|22090799003|47200799024|58200799021|20103052916048|20103052902057|20103052906057|20103052914048|20103052904057|20103052908033|5070799012|17110799012|440099028|3412199025|6022199012|26104999006|22062799003|74000799027; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2026 15:04:42.2785 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB7447 X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.6646403 X-MS-Exchange-Processed-By-BccFoldering: 15.20.9611.001 X-Microsoft-Antispam-Mailbox-Delivery: rwl:1;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:I;OFR:TrustedRecipientList;ENG:(5062000311)(920221119095)(90000117)(920221120095)(90005022)(91005020)(91035115)(9050020)(9100341)(944500132)(2008001181)(2008121020)(4810010)(4910033)(10005027)(9810001)(9610028)(9515023)(10112040)(9404095)(9310011)(9220031)(120001)(1110175); X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0tMQ== X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?9wk6LR9cFQGaDDlIB5yWQwg+Ke1JZZMBdAZICN8x+pvfSD9pwMm3TYoT4DDE?= =?us-ascii?Q?FFfe8o1bL0iDbTAaOZSBNwOvSOL4y7IeyYZBFx+4HXDs2BfqUMdItFAlUSNJ?= =?us-ascii?Q?2l8TRu6DpFkAbT53zAIxrqWrhqKiKiuvXrrXhUcJg5LdQzTUOSsF3CrjlglT?= =?us-ascii?Q?qzMDbXtKGnYRcNfGnFjpGnVLdGJfwaatIP1qpXorLrHdZl0ZnWHHgFozChh/?= =?us-ascii?Q?HVLhMnS9CEI+Ds4RE5vDuc5taIZ8ia/KKWZgWebqk46WHSqupD92kDA0VN+D?= =?us-ascii?Q?FKvTUZbUo+5g3EJbqXpHIwijLPS/L1I48AggfB8RCqEV9YXqtJoaYOjd3ZBc?= =?us-ascii?Q?atY6+iGkijKhoasRsgYStu9mgBwBV82BiSMrPtTu3GbwIXIA7oeR6o6V8lDq?= =?us-ascii?Q?iNvCEPTO1lDJmnBqIUcbkODnlj2m2YFUebXIRssL2DAHaRgn4Q8xi/ZTzwQI?= =?us-ascii?Q?tFPqYcio6zEovoIXgLMdzbSRe3ZRQOsvWjbRMlXWvYVKAnrz4sK2yPZUo1Lq?= =?us-ascii?Q?IUnekTN7SRT706UWnMPTAFbZ9M+mKPAqKAhu005g9J+jBDWLwtoSG4Flw6Q/?= =?us-ascii?Q?v0zUEV27NNHESnITneZaYCJnqG2L/G1A0ozZnW7ObqyX0qy4OW06861qhC+/?= =?us-ascii?Q?4qLHRib9vAc9UM4ILymsC/G8KyCiWcA6GNmJ7hZGAs0Fu8+agvGcsu7vnQG4?= =?us-ascii?Q?TxbIijOWxagnCmKGYF7woTG/l4GV5OWzu/XSOJaaU9DpvpTTS/zmcFCb4YMB?= =?us-ascii?Q?zWrKKFWG69O3ZtbscS7GVjfjY/bPaD+1cCSvadBYuZlRNe7cPN3xEP6pbckR?= =?us-ascii?Q?N35nNr5v0Ne4ApO77X9aNaeik0d/sw1ptGY8NI/0c9eKKW3glesbIjINnaNS?= =?us-ascii?Q?G56XsfRbPJMcI5G+mrgnLdORDsvThflnu3+N1XHgl0hMU+SGO44wN51MEc/8?= =?us-ascii?Q?dCsEmmnfpJzVTIzmQvSrB7282A8pJRBDdOHUFTi5ezmYCZKEbMYAhd1As1Uk?= =?us-ascii?Q?e7G9x5sQwZsRxS8Ou7jjQFWkji4I1GQxhUxuH8Sb5tBG6ErwrCOy4XALyksV?= =?us-ascii?Q?U2jMSUXUpte89uFcGY4IM6BQ2xgKoJEZ8c2Vr8AhcPyUMIxdlh+G9lS1szen?= =?us-ascii?Q?A4CL1PlGrSoKKDtVrl0oYki8hV9sVRE1jglLn138Orh9Ft6Is+2aahftwKNS?= =?us-ascii?Q?bK4bsheHMtEBoUDL8p8i8gagBVOB2i+zSP+P8vZIxGw+LUwG6uGjAa7B55dl?= =?us-ascii?Q?qqleODPe5Iw3x0p7RGc3f5vz2mF+/ntaHo5QCrDMvEahKKWj2b0g/yeQ1Lft?= =?us-ascii?Q?55SDMujULCnWr9PEDjLo4oqISfih+NiasVPdC7gRZMlRHIBzRVruLAUgk9Z4?= =?us-ascii?Q?rfKlWjYh1EW90sHw/ygh0Aa1UvXgJ/03b+klVbSnRS85G7MnPgzGgI4V2Wkc?= =?us-ascii?Q?qeyMhYHHeWufb9VPlJbvDIB5VTBPlJIl2WOY2Zd4/V3DJNAzCXJaE4E/Qh6/?= =?us-ascii?Q?Ngh5BlMa1PsyZOivoZGJ+cdUztGXJrjhdPh/c2So8eeXgz3eBVvDUcEsdxwK?= =?us-ascii?Q?mUWO2lb/SreHp/ajeinqgpYYG0ruzhnHbkWzNuitYGqKNk6ZDD9gdycHkNQr?= =?us-ascii?Q?QocUjmajpiqyYwjv5/GtUSBaDOv4EgUDDvwQjD7anoWMUq1Wl+SIKn6RXAH2?= =?us-ascii?Q?dRNBro3ahnOYZm4hW9fJM5mL59kkGewIOGRGJuEltRJewbnI17rCvFBuRIG2?= =?us-ascii?Q?uiDvcIOTmsfvlj15qTVBiC8knlPRlfNSTtt6UyE+QXs7OiKl7dX+ORGYx4sB?= =?us-ascii?Q?ku/0CstBAP8xFkxU36XPoNb4XFhUExsoDIf6abwvs3AbCGhhKsBgxd+1Nasw?= =?us-ascii?Q?dzCwcht/EyyZPD4pJyG2ROSykislj6SYO169cMgglasDTkcXCYWFYYWUEDZ4?= =?us-ascii?Q?NDwSHrI0xQ/PtS7sD0gVF37OFoEw7Vgu1fYfIuA3kkYoZty+dehWmXm9bfVb?= =?us-ascii?Q?wD9uxjHf2I9xsCgi2JEFlsBewqFaBNIwvst0bfNoEDM8dVYJxas/pSkfYzGp?= =?us-ascii?Q?r0C5vwZyXdnf+ZufSMlVYC3lFeUaWamr2198V73w1V06VHFyzJARc9T+Dh6u?= =?us-ascii?Q?3Z1Hnq5hgk1pXV5Vs+jlh+08Qws01gbtWZoN+a9UjYFz4cPoJj9CUPXZzREN?= =?us-ascii?Q?4Id0A8sUjmi/0UwS48yEjRc6UsIPLdmywEfX8ZW7j6v/zXAZoLG8enTf+5nC?= =?us-ascii?Q?7lHdrO9i/+pL5uZTexyJnK7c6Wgpyld9swzie8ugbT8V4FLT5ARbFAFj2duW?= =?us-ascii?Q?5YsPGGIScyP1+Fe+4QjoQ5kNh+kYHlKmcpw1GjFnR+/z+hQUsBtOvOIAH21p?= =?us-ascii?Q?mrOzfAZgw518DUVfetuWyLHphXEXDJpvL8FwZseT6ihsRA0AzyNQaqlLjxra?= =?us-ascii?Q?2/v7PM422cVCgA67r/JMkSddIo/WBWQGMAn0ivw3ykCMYgW+8fM3QLtJSNvj?= =?us-ascii?Q?y+n4A7ds+tU/7Lh5xMAxl+89/hq1M2u6E3y6RcxGy92a6eLTVgoSo+fZ5kgY?= =?us-ascii?Q?yd7eD7pcx1zakt9vJi2zZo+jLjbKRKUPoQa4HsAEfV5phUrY3gT+Umf/QkMJ?= =?us-ascii?Q?XWlEKzkZ8N7NtPflbe5eEPQEXK7nZD69XecxtPgiaU5MDNb+rRttz66pNpdR?= =?us-ascii?Q?zv/TogIQEblg17z+zDUsiucBvtyVULBb8bdfdAoBWRZON36XEOAEHhXIW/Qq?= =?us-ascii?Q?hkP23VOkPwnzgRjFu3t2FvIf7rarJWqc95+CcVoi+Cjy0FcXxUGAFkmat6xL?= =?us-ascii?Q?V1BkX9i3FROCtL4K3H9H3OpiLO1nmUNci/RjIlNp6HFu1U/7u7v7wwa5HKrF?= =?us-ascii?Q?poFhJlNsk+yI5kgc8eKzTp5gpsH/W9EBK/Ir27YinOt4yUIFdCcHiZ2XgoeC?= =?us-ascii?Q?6T+a51HgqOf7+SWKFj4cS8x6o3kFgQvU60hwanqOpuDyUd5vy05PpPlXqjOs?= =?us-ascii?Q?IpgUeqjKmlvB33G1SB2DD9fIP1xDX9Sz9szVv3fJt25xq6tRuPrdVhHt7AY+?= =?us-ascii?Q?a3PGmppUEDFC+93XToCrDKYcvVEho7stDwaqSi3GbhhOph2YUu4Is21MlBGh?= =?us-ascii?Q?cchkvczgeWugyYpHxlC2rQQ+ljutsD+cPEHRpNbcnJ+x3x8aA/PN94TJcyGC?= =?us-ascii?Q?p7Fy+9dZhsRvRRhgJeKN/vViF2+0cmU21tLIf6Mx34uJk7iKoMskpezl3wH5?= =?us-ascii?Q?0y4YOicTbMJmJRgymN0SciwfLRLrz+3tC97PPMmLoJ3IrX67l1FcvuYtdVln?= =?us-ascii?Q?T9OoFKk8MwK1EnoUiWOiGnlKo4bafKTHO6000Mf8H/pJM57Swr6KwbR57Q1W?= =?us-ascii?Q?6j5zPqNUuwnEcjgiXt9nXdGRogqe1QIWvqC2wfWcgq7uFcxbHQtoB7uKGXL3?= =?us-ascii?Q?HY7eYUSmTtB2wnUUt6cFQ0g2DCGVzZ7nyj0bsJYb8XDFQawpW7uz9JdeDFUr?= =?us-ascii?Q?6mXbTIJDKOL3QDe8yDhXu73p9vTrYKdX2TymaFsMkUKTP/zyiapOG6tWofTk?= =?us-ascii?Q?nhTpDJCOhDG8O3/cvz3SPO/kMvjKOAz41JsALxV2?= MIME-Version: 1.0 Dear , Please click the link below to view wire transfer copy https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwatchpro= tectionfilms.com%2FWire_transfer.msi&data=3D05%7C02%7C%7C90210053ef744e9914= ed08de6b11378b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639065918852016= 368%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlA= iOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DiDyPB65G= BP4vvNL3aGMXtbQK1akZP6SVt9Hrsz%2BoYNc%3D&reserved=3D0 Your business is greatly appreciated. Ampak Sportswear Inc=20 8253 Backlick Road Ste B Lorton, Va 22079 phone:(703)861-5210 Website: AMPAKSPORTSWEAR.COM=20 --_002_JMR90210053ef744e9914ed08de6b11378bJunk6390672917730362_-- --7A1671CA-C394-4D1D-AF56-E1FD206A9E39--
Krydos Posted February 16 Posted February 16 Yes, we read the email before we forwarded it to you. The IP address 46.185.128.173 which appears to be Amman, Jordan using the email address contact@mejuri.com sent the phishing email to contact@softhauz.ca on Morty, and then since you have everything forwarding to softhauz@outlook.com then Microsoft is complaining that we're sending phishing emails to them. We've not blaming you for receiving a phishing email, we're asking you to please not forward phishing emails to Outlook so Morty's sender IP address isn't ruined. If you think your Morty account is hacked we can suspend it and set up a fresh account for you.
softhauz Posted February 16 Posted February 16 (edited) Yes, I understand that (for one that was sent to softhauz.ca that forwards to outlook.com --- mejuri.com is only one of them, that's already blocked from my local client) --- on light of that, all forwarding from softhauz.ca to personal emails have been disabled. I just took the opportunity to also tell you about the maneuvering from a 3rd-party that portrays to come from my email address. (Screenshot attached)Â As per the screenshot, it doesn't seem that my account is compromised, as the nature of maneuver can be applied to any email address accepting public mails (non-restricted). Not sure if you're aware so I thought I'd let you know -- in case it happens to you. Thanks Edited February 16 by softhauz
Krydos Posted February 16 Posted February 16 It's always been possible to spoof the from header. That's the entire reason SPF, and later DKIM was invented, to make sure the from address in the email is authorized to be sending these emails. It looks like your domain doesn't have SPF or DKIM set up so I went ahead and did that for you. Now when someone tries to send emails as you, the receiving email server will be able to check the SPF and DKIM values from our DNS, and know that they weren't actually sent by your domain. The receiving email server will either delete them or mark them as spam.
softhauz Posted February 16 Posted February 16 oh wonderful, great to learn something more about networks. Thanks for the set-up of SPF/DKIM, much appreciated
HelioHost Posted February 19 Author Posted February 19 Hi, I need the sending enabled for karen.urate@softhauz.ca --- you can limit the outgoing to 1 per hour or 5 per day --- this is only until I move the softhauz.ca emails to a different provider (I don't see the need for that, I believe Morty's ok). All forwardings on all softhauz.ca are already disabled. ________________________________
wolstech Posted February 19 Posted February 19 Mail sending has been restored on your account. It may take a few minutes to work again.
Recommended Posts