Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id QHLtLfEIfWlZfQAAyTkJsw (envelope-from ) for ; Fri, 30 Jan 2026 12:39:29 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Fri, 30 Jan 2026 12:39:29 -0700 Received: from [222.96.157.252] (port=57095 helo=secure.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1vluL1-0008MS-QS for info@behniwalgroup.com; Fri, 30 Jan 2026 12:39:29 -0700 From: "Chase" To: info@behniwalgroup.com Date: 31 Jan 2026 04:38:46 +0900 Message-ID: <20260131043845.CEA123EEF8FA2055@secure.net> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=7.8 X-Spam-Score: 78 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your Credit/Refund has posted. Dear info, Credit/Refund was issue to your account. Content analysis details: (7.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [222.96.157.252 listed in psbl.surriel.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: awdh.vip] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [222.96.157.252 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [222.96.157.252 listed in bl.score.senderscore.com] 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: awdh.vip (vip)] 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_SHORT Use of a URL Shortener for very short URL X-Spam-Flag: YES Subject: Your Credit has posted

Your Credit/Refund has posted.

Dear info,

Credit/R= efund was issue to your account.

For Safety Re= asons, Please review your issued payment.

<= STRONG style=3D"FONT-WEIGHT: normal; COLOR: rgb(255,255,255)"> Merchant Credit