Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id iDwCAiKvnGikRAAAyTkJsw (envelope-from ) for ; Wed, 13 Aug 2025 09:28:34 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Wed, 13 Aug 2025 09:28:34 -0600 Received: from [185.221.222.55] (port=33237 helo=rdns0.iternont.online) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1umDOy-0003wt-Mr for info@behniwalgroup.com; Wed, 13 Aug 2025 09:28:33 -0600 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=iternont.online; h=From:Subject:To:Content-Type:MIME-Version:Date:Message-Id; i=info@iternont.online; bh=OXn1C5QQYNNkh/J41ppP2e8/uT4njNPxvH8oGzwXV2I=; b=IxkcxzVov825BZrw0Ry25z8m1PnVLYp5VKkeooeqa/Wx5y/CIWr8W5kBfkoSelM9k3iW7TqA4ZfL PgYdPknGxbgWmiR/ezt/Oypo3rHuZWRf24T3/alR1G6cEbxVLyVFGfuSy7ldymAU1EZtEjr/oVS8 L1pCV1V7bUC9Myjl5PA= From: "Webmail Support" To: Content-Type: multipart/alternative; boundary="H3veSn1FFGj8SVdPbqAjD68Zbvo=_bZb95" MIME-Version: 1.0 Date: Wed, 13 Aug 2025 08:27:50 -0700 Message-Id: <13502025082708B5C0F28228$E3BBCC2AC7@iternont.online> X-Spam-Status: Yes, score=8.7 X-Spam-Score: 87 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview:     Your account info@behniwalgroup.com password expires today Wednesday, August 13, 2025 Content analysis details: (8.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ipfs.io] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.221.222.55 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.221.222.55 listed in bl.score.senderscore.com] 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: iternont.online (online)] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 T_MXG_EMAIL_FRAG URI with email in fragment 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.0 KAM_SHORT Use of a URL Shortener for very short URL 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.1 URI_IPFSIO References Interplanetary File System PtP content via ipfs.io, likely phishing 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.4 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing X-Spam-Flag: YES Subject: Reset: info@behniwalgroup.com This is a multi-part message in MIME format --H3veSn1FFGj8SVdPbqAjD68Zbvo=_bZb95 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =A0 =A0 Your account info@behniwalgroup.com password expires today Wednesday, = August 13, 2025 Please kindly use the button below to continue with the same password.= Keep Same Password https://secure.adnxs.com/clktrb?id=3D273568&redir=3D= https://ipfs.io/ipfs/bafybeiedxvjj67ehxjeoetkymozmkrjff64gogbk7ztngtcn= 4qrqsgrzge/eti3.html#info@behniwalgroup.com =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 --H3veSn1FFGj8SVdPbqAjD68Zbvo=_bZb95 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
 

 

Your a= ccount info@behniwalgroup.com password expires today Wednesday, August 13, 2025

<= p align=3D"center">Please kindly use the button below to continue with= the same password.



=
Keep Same Password

 

 

&n= bsp;

 

 

 

 

 <= /p>

 

 

 

 

 

 

 

 

 

 

&nbs= p;

 

 

--H3veSn1FFGj8SVdPbqAjD68Zbvo=_bZb95--