From: " The Wall Street Journal" Date: Tue, 02 Jun 2026 16:07:56 +0000 Subject: Please Update Your WSJ Payment Information Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP by server.fernsconsulting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 X-Ham-Report: Spam detection software, running on the system "server.fernsconsulting.com", pts rule name description http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block author's domain 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" We are experiencing difficulty processing the charge to your credit card ending in 7619, which we have on file for your WSJ Basic Digital Package subscription. to ensure your subscription continues. Until your payment information is updated, your account will be temporarily suspended. The above link expires within 7 days and transactions performed through the link above are specific to your account and shall not be shared with others. --- From: "AT&T Account Management" Date: Thu, 12 Mar 2026 09:54:58 -0600 Subject: You made some changes to your wireless account, Arthur Spence Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP Received: from mta5.account.att-mail.com ([128.245.70.183]:43555) by server.fernsconsulting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 i=update@account.att-mail.com; +ReFQjec5bgNXmJvpqXj4Ykc4M/gA/99EZSdgA=Received: by mta5.account.att-mail.com id hmbgvo2fmd49 for From: "AT&T Account Management" Subject: You made some changes to your wireless account, Arthur Spence Reply-To: "AT&T Account Management" Content-Type: multipart/alternative; X-Ham-Report: Spam detection software, running on the system "server.fernsconsulting.com", Content preview: https://click.account.att-mail.com/?qs=eyJkZWtJZCI6IjQyMTg3YjFiLWUzZDAtNDYyZC1hOTBjLTY3NjA3ZjE1NGY2NiIsImRla1ZlcnNpb24iOjEsIml2IjoicktRbXRtaHdxTFJKQldkb0JHTTIvQT09IiwiY2lwaGVyVGV4dCI6Im9lN1JxMzdxVzg5c pts rule name description http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block author's domain 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of https://click.account.att-mail.com/?qs=eyJkZWtJZCI6IjQyMTg3YjFiLWUzZDAtNDYyZC1hOTBjLTY3NjA3ZjE1NGY2NiIsImRla1ZlcnNpb24iOjEsIml2IjoicktRbXRtaHdxTFJKQldkb0JHTTIvQT09IiwiY2lwaGVyVGV4dCI6Im9lN1JxMzdxVzg5cVh2dHc1K2ZjTlc4Qm9DV2lURXVBbjU1NERoSUNYZ1RjbFVnVXpkbDBOaTNIZkdvUDM4d051WG5paFRwQ2VkVDdpQmZBdDUrVy9uTHcwdWZ5ZzZLSmx0RnNnbklPcktRbXRtaHdxTFJKQldkb0JHTTIvQT09IiwiYXV0aFRhZyI6Imx2NXk4TkxuOG9PaWlaYlJiSUp5RGc9PSJ9 You made a few changes to your wireless account on Mar. 12, 2026: https://click.account.att-mail.com/?qs=eyJkZWtJZCI6ImY3ZDU2Y2YyLTE1NjItNDI5Ni1hNDg2LTJiYmUwNjg1NzhhMiIsImRla1ZlcnNpb24iOjEsIml2IjoiNGlFTmtIb2pDVW5MN3J2NllOQ21QQT09IiwiY2lwaGVyVGV4dCI6IisydmJ4Y2Ntb2h0NHN0Q1Y1S1NXdDZNN1o3TVhoZ2FEVGYvb0lBSlhCajF6RlRWbVVNQWtUaVRmQVR6TXdGdGZNdmlKU0FVQUxzRElvTFFLUWQrSGdpZDdDajFaWDNPYjF4Nnl1R3QyNGlFTmtIb2pDVW5MN3J2NllOQ21QQT09IiwiYXV0aFRhZyI6Img0SW5ld285V1Y5em05Y2VzcmhyZGc9PSJ9 https://click.account.att-mail.com/?qs=eyJkZWtJZCI6IjdiZmVhZjBmLTIyNmQtNGZkOS04NGE2LTg5OTlmZDg3NmZiNCIsImRla1ZlcnNpb24iOjEsIml2IjoicjNJY1FodGVrUTRlK1NLN2JzazZhUT09IiwiY2lwaGVyVGV4dCI6IkJIQXhsQmhXNlVLWkxPZUV0UjhGUWFKU3VIdGdnb0JrMnFNYWt1SjJybWN2cWZ3RWlaMFhqSTBGTEJydnliL1JKNXRnaW1zYURRMFU5ZkRnQkd3Q0Vlb3Nyd1NyTDUwUENtdWdISndycjNJY1FodGVrUTRlK1NLN2JzazZhUT09IiwiYXV0aFRhZyI6IkFoSHFMSzhFcXkrZER3cHJvQnljS3c9PSJ9 --- From: Apple Pay Date: Sun, 9 Aug 2026 23:47:53 +0000 (GMT) Subject: Start using Apple Pay. Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP by server.fernsconsulting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ijRd0WIpyWmgAte: Sun, 9 Aug 2026 23:47:53 +0000 (GMT) Content-Type: multipart/alternative; X-Ham-Report: Spam detection software, running on the system "server.fernsconsulting.com", Content preview: Apple Pay Pay with your iPhone screen https://www.apple.com/apple-pay/ pts rule name description -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low [17.32.227.108 listed in list.dnswl.org] envelope-from domain domain 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty Pay with your iPhone screen Pay with your iPhone at millions of places. Iphone with double click side button highlighted. How to pay in stores with iPhone. 3. Hold the top of your iPhone near the contactless reader. https://www.apple.com/apple-pay/how-to/#video-in-store-iphone Tip: To use a different card when shopping in stores, tap your default card and select a new one before authenticating. --- === ANDREW cPanel email sample === From: Subject: Return-Path: Delivered-To: andrew@propelpromos.com Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP id ME12JTTFXmpfMgAA1NPc1w (envelope-from ; Mon, 20 Jul 2026 18:02:44 -0700 Return-path: Envelope-to: andrew@propelpromos.com Delivery-date: Mon, 20 Jul 2026 18:02:44 -0700 Received: from mail-pj1-f52.google.com ([209.85.216.52]:60632) by server.fernsconsulting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.99.4) (envelope-from id 1wlysd-000000003PE-3HQS for andrew@propelpromos.com; Mon, 20 Jul 2026 18:02:44 -0700 Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-38dfe7eb825so5827571a91.0 ; Mon, 20 Jul 2026 18:02:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s 251104; t84595763; x85200563; darn=propelpromos.com; h=to:from:date:mime-version:content-type:subject:message-id:from:to :cc:subject:date:message-id:reply-to:content-type; bh=FHg3WqCpbMpmRSa4iAc56dPwdXh3tZM1eq118Rkng1o=; b=L/IyUjw26sUK/EFCDP18iet2GdofdQY3VLlvTUMwbSBigzMO7X1yhD5gazxosvJTcl otV28iKJbnufx/fK2YIlKVtQYNsD3tWcczNwvkBqw2EWlsoQ8dsOsuZnTCl5+T8hjIK5 9K2VJubzeqY7SN2rxEFCLfiHXyxIv2gjrWiZfgADqfRnI63bWgOyhZFx5UQTS0uh1i8p bGogyfeipcQxjwDsjp3r9HFJ3EjIqf6cstcF42OslgMmS8sdcdNgisHqMjZF1yQ8xvmq 591jRrKEAS4imkFm8C4GCoI1KSB0Ux5XK0QF2tjrUQxAGkfaD93qieu6V1DzsNaDM08T nnGA=X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; --- === DONE ===