ication
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=----NextPart_1765285731584.0000396999
X-ups.nes.encoded.data: ____2@@@@@2A80XfemGMEroBMv8hoh____
X-ups.nes.report.data: @@@@[B@4b6660b7@[B@4956ecc9@@@@
Date: Tue, 9 Dec 2025 08:08:51 -0500 (EST)
Message-ID: <120832773.5436563.1765285731596.JavaMail.1001@mahsmtpappspp.ups.com>
X-Proofpoint-Virus-Version: vendor=nai engine=6800 definitions=11633
signatures=596818
X-DKIM: signer='ups.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, 0 Spam score
X-Spam-Score: 0.6 (/)
X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has
performed the tests listed below against this email.
Information: https://mxroutedocs.com/directadmin/spamfilters/
---
Content analysis details: (0.6 points)
---
pts rule name description
---- ---------------------- -----------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: omtrdc.net]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/,
low trust
[148.163.140.11 listed in list.dnswl.org]
1.5 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)
[148.163.140.11 listed in wl.mailspike.net]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 DKIMWL_WL_HIGH DKIMwl.org - High trust sender
SpamTally: Final spam score: 6
------NextPart_1765285731584.0000396999
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi,
Here=E2=80=99s the PIN (Personal Identification Number) to use for verifyin=
g your identity. Please use the Personal Identification Number (PIN) below =
to complete the process.
PIN: 246393
This PIN expires in 30 minutes.
Thanks so much for choosing UPS.
(C) 2025 United Parcel Service of America, Inc. UPS, the UPS brandmark, and=
the color brown are trademarks of United Parcel Service of America, Inc. A=
ll rights reserved.
All trademarks, trade names, or service marks that appear in connection wit=
h UPS's services are the property of their respective owners.
Please do not reply directly to this email. UPS will not receive any reply =
message.
Review the UPS Privacy Notice
https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/p=
rivacy-notice
For Questions, Visit Our Help and Support Center
https://www.ups.com/us/en/support/tracking-support.page
------NextPart_1765285731584.0000396999
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
UPS My Choice Email
=20
Hi,
Here’s the PIN (Person=
al Identification Number) to use for verifying your identity.
------NextPart_1765285731584.0000396999--
From - Tue Dec 09 13:09:09 2025
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path:
Delivered-To: HI@JOSIE.LOL
Received: from witcher.mxrouting.net
by witcher.mxrouting.net with LMTP
id gDuvF2UfOGnLfDoAYBR5ng
(envelope-from )
for ; Tue, 09 Dec 2025 13:08:53 +0000
Return-path:
Envelope-to: HI@JOSIE.LOL
Delivery-date: Tue, 09 Dec 2025 13:08:53 +0000
Received: from mx0b-002b8002.pphosted.com ([148.163.140.11])
by witcher.mxrouting.net with esmtps (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from )
id 1vSxSX-0000000GYQv-0pGT
for HI@JOSIE.LOL;
Tue, 09 Dec 2025 13:08:53 +0000
Received: from pps.filterd (m0425506.ppops.net [127.0.0.1])
by mx0a-002b8002.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 5B9D2YO5008947
for ; Tue, 9 Dec 2025 08:08:52 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ups.com; h=
content-type:date:from:message-id:mime-version:subject:to; s=
nespps1; bh=kE7jBTjQVYJmpJaWtd0mUosISeVoqH74lBHbSMI0d8I=; b=ql45
5qdKkfHzP7TVRDYI0KbcaP0UPpCVOucSxrV2OLP7oOoMWxKgFcP1VjJ1Y11syAzi
3S0nYLKJx+0pOHjrTg3Sl9pv26lgiZ9NHPPcl8UIbSi9cVxkd9Uh7klel5bG5AE1
jZgr0GIagoeemoFAtZZv//F8a+ilQD7svl9G53zmMfuMgc7rr94/TqTgp2NpD1OF
SjznSrTiVL7iFOC557oad5tem/U6wP+VTNWmGIVTfQohQiqt7jvE/TFyRDBiFAIf
ezwQQxjfJEn8qhb6tHUTfTv9x1izuy8hbDQ0n5/eLm5t2clM/fcmjb02gveOKKXN
cgz58yaParA9E/fBEQ==
Received: from njppsappsagent3.ups.com (njppsappsagent3.ups.com [153.2.233.7])
by mx0a-002b8002.pphosted.com (PPS) with ESMTPS id 4aw6aeh078-1
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
for ; Tue, 09 Dec 2025 08:08:52 -0500 (EST)
Received: from pps.filterd (njppsappsagent3.ups.com [127.0.0.1])
by njppsappsagent3.ups.com (8.18.1.2/8.18.1.2) with ESMTP id 5B97ewLc018413
for ; Tue, 9 Dec 2025 08:08:51 -0500
Received: from nscore-69d5d57484-fmjzw (lsvrocpp30112.linux.us.ups.com [10.127.1.144])
by njppsappsagent3.ups.com (PPS) with ESMTPS id 4avgpuufc8-1
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
for ; Tue, 09 Dec 2025 08:08:51 -0500
From: "UPS Comm-Account Confirm"
To: HI@JOSIE.LOL
Subject: UPS Identity Verification
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=----NextPart_1765285731584.0000396999
X-ups.nes.encoded.data: ____2@@@@@2A80XfemGMEroBMv8hoh____
X-ups.nes.report.data: @@@@[B@4b6660b7@[B@4956ecc9@@@@
Date: Tue, 9 Dec 2025 08:08:51 -0500 (EST)
Message-ID: <120832773.5436563.1765285731596.JavaMail.1001@mahsmtpappspp.ups.com>
X-Proofpoint-Virus-Version: vendor=nai engine=6800 definitions=11633
signatures=596818
X-DKIM: signer='ups.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, 0 Spam score
X-Spam-Score: 0.6 (/)
X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has
performed the tests listed below against this email.
Information: https://mxroutedocs.com/directadmin/spamfilters/
---
Content analysis details: (0.6 points)
---
pts rule name description
---- ---------------------- -----------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: omtrdc.net]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/,
low trust
[148.163.140.11 listed in list.dnswl.org]
1.5 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)
[148.163.140.11 listed in wl.mailspike.net]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 DKIMWL_WL_HIGH DKIMwl.org - High trust sender
SpamTally: Final spam score: 6
------NextPart_1765285731584.0000396999
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi,
Here=E2=80=99s the PIN (Personal Identification Number) to use for verifyin=
g your identity. Please use the Personal Identification Number (PIN) below =
to complete the process.
PIN: 246393
This PIN expires in 30 minutes.
Thanks so much for choosing UPS.
(C) 2025 United Parcel Service of America, Inc. UPS, the UPS brandmark, and=
the color brown are trademarks of United Parcel Service of America, Inc. A=
ll rights reserved.
All trademarks, trade names, or service marks that appear in connection wit=
h UPS's services are the property of their respective owners.
Please do not reply directly to this email. UPS will not receive any reply =
message.
Review the UPS Privacy Notice
https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/p=
rivacy-notice
For Questions, Visit Our Help and Support Center
https://www.ups.com/us/en/support/tracking-support.page
------NextPart_1765285731584.0000396999
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
UPS My Choice Email
=20
Hi,
Here’s the PIN (Person=
al Identification Number) to use for verifying your identity.
------NextPart_1765285731584.0000396999--
From - Tue Dec 09 13:23:53 2025
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path:
Delivered-To: hi@josie.lol
Received: from witcher.mxrouting.net
by witcher.mxrouting.net with LMTP
id GEBNFOciOGmaiTwAYBR5ng
(envelope-from )
for ; Tue, 09 Dec 2025 13:23:51 +0000
Return-path:
Envelope-to: hi@josie.lol
Delivery-date: Tue, 09 Dec 2025 13:23:51 +0000
Received: from lists.archlinux.org ([95.217.236.249])
by witcher.mxrouting.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from )
id 1vSxh0-0000000H2V0-3rPG
for hi@josie.lol;
Tue, 09 Dec 2025 13:23:51 +0000
Received: from [95.217.236.249] (localhost [IPv6:::1])
by lists.archlinux.org (Postfix) with ESMTP id 4366F6051E5A;
Tue, 09 Dec 2025 13:23:49 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
by lists.archlinux.org (Postfix) with ESMTPS id B27416051D4A
for ; Tue, 09 Dec 2025 13:23:21 +0000 (UTC)
Authentication-Results: lists.archlinux.org;
dkim=pass header.d=riseup.net header.s=squak header.b=SRDBpXrR;
dmarc=pass (policy=none) header.from=riseup.net;
spf=pass (lists.archlinux.org: domain of ralf-mardorf@riseup.net designates
198.252.153.129 as permitted sender) smtp.mailfrom=ralf-mardorf@riseup.net
Received: from fews04-sea.riseup.net (fews04-sea-pn.riseup.net [10.0.1.154])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest
SHA256)
(No client certificate requested)
by mx1.riseup.net (Postfix) with ESMTPS id 4dQfg013CnzDqSm
for ; Tue, 9 Dec 2025 13:23:08 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=riseup.net; s=squak;
t=y-date: Sat, 28 Feb 2026 13:58:55 +0000
Received: from mx3.slc.paypal.com ([173.0.84.228])
by witcher.mxrouting.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from )
id 1vwKqM-00000006DdI-27Rp
for pfeifferj@archlinux.ch;
Sat, 28 Feb 2026 13:58:55 +0000
DKIM-Signature: v=1; a=rsa-sha256; d=paypal.ch; s=pp-dkim1; c=relaxed/relaxed;
q=dns/txt; i=@paypal.ch; t=1772287133;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=OLM1AXLAxxwvoCMl9KlzkLGE+fMh1mcTAQqGflqAJUk=;
b=oJ8PpCfBxqg7uPz5iWkJZaUCK+9UvK8vx/A2+rM1cllzCj/6YUUVcrt+gDDXeEpI
Q9sYt4UdPfItR6vmB9Ax4FUNlY0xp/E/8L7IXTgtrih3yU53pat3gZ/p7fRmTLG8
oJ35DY2skVg5dBLHslBuWQFDqH1QBLx6LOlemREJXTirftXbpy4qDTRWNkwsal5d
n6H935nfOuI6uPQheF7qx2SZ9R2/x7YF9EZdqfoxHyeT5bA4Fo9TbuUocLm0ClXj
ts0kfK4QMkLumBgftyLzCSmBhEaYeTmoo1sybK+6D7Z3tuH/1K7pwBLQq4042rel
U2gJX5WlyV1OtzaBttS3Pg==;
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Sat, 28 Feb 2026 05:58:53 -0800
Message-ID:
MIME-Version: 1.0
From: PayPal
To: Josephine Pfeiffer
Reply-To: Josephine Pfeiffer
Subject: Receipt for Your Payment to Hostinger Internatio...
X-MaxCode-Template: RT001736
X-PP-Priority: 0-paypal-false
PP-Correlation-Id: 3022485acae5e
X-PP-Email-transmission-Id: 9d939b27-14ad-11f1-aac1-cb738bda7b83
X-PP-REQUESTED-TIME: 1772287128965
X-Email-Type-Id: RT001736
AMQ-Delivery-Message-Id: nullval
X-XPT-XSL-Name: nullval
X-DKIM: signer='paypal.ch' status='pass' reason=''
DKIMCheck: Server passes DKIM test, 0 Spam score
X-DKIM: signer='@paypal.ch' status='pass' reason=''
X-Spam-Score: 4.6 (++++)
X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has
performed the tests listed below against this email.
Information: https://docs.mxroute.com/docs/expert-spam-filtering.html
---
Content analysis details: (4.6 points)
---
pts rule name description
---- ---------------------- -----------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: paypal.ch]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: paypal.ch]
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[173.0.84.228 listed in wl.mailspike.net]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/,
low trust
[173.0.84.228 listed in list.dnswl.org]
2.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 HTML_MESSAGE BODY: HTML included in message
0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: paypal.ch]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 T_REMOTE_IMAGE Message contains an external image
-0.0 DKIMWL_WL_HIGH DKIMwl.org - High trust sender
SpamTally: Final spam score: 46
=0A=0A =0A =0A =0A Receipt for Your Payment to Hosting=
er Internatio...=0A =0A =0A=0A =0A
=
Josephine Pfeiffer, you successfully sent a payment.
=0A
=0A =0A
=0A
=0A
=0A
=0A =0A
=0A =
=0A
=0A =
=0A
=0A
=0A=
=0A =0A =
=0A
Hello, Josephine Pfeiffer
=0A =
=0A =0A =
=0A
=0A =
=0A
=0A =0A
=0A =
=0A
=0A =
=0A
=0A =
=0A
=0A =
=0A
=0A =0A
=0A
=0A =
=0A =0A
=0A =0A =0A =
=0A
=0A =
=0A =0A =
=0A
=0A =
You paid $19,45=C2=A0USD to Hosti=
nger Internatio...
![3D""](3D"http://www.ups.com/img/1.gif")