Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id ljdILtaWg2lIXAAAyTkJsw (envelope-from ) for ; Wed, 04 Feb 2026 11:58:30 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Wed, 04 Feb 2026 11:58:30 -0700 Received: from [195.95.158.222] (port=30331 helo=auth.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1vni57-00068H-3n for info@behniwalgroup.com; Wed, 04 Feb 2026 11:58:30 -0700 From: "Wells Fargo" To: info@behniwalgroup.com Date: 04 Feb 2026 12:57:47 -0600 Message-ID: <20260204125747.4B5C75ED3805A65C@auth.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=11.3 X-Spam-Score: 113 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Disputed payment Reversal See the details of your disputed transaction in the amount of $804.22. Follow the prompt below to view details. View credited payment Thank you for choosing Wells Fargo. Content analysis details: (11.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yusercontent.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [195.95.158.222 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [195.95.158.222 listed in sa-accredit.habeas.com] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [195.95.158.222 listed in zen.spamhaus.org] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 3.5 URI_WP_HACKED URI for compromised WordPress site, possible malware X-Spam-Flag: YES Subject: A Disputed payment has been credited to your account
3D"Wells=

See the details of your dispu= ted transaction in the amount of $804.22. Follow the prompt below to view d= etails.
     = ;           View credited payment


Thank you for choosing Wells Fargo.

Please do not reply to this automated emai= l.

If you have any questions about= your account, please refer to the contact information on your statement. f= or questions about viewing your statements or making a payment online, Well= s Fargo Online service is available 24 hours a day, 7 days a week. call us = at 1-800-954-4442.

Investment products and service= s are offered through Wells Fargo Advisors. Wells Fargo Advisors is a trade= name used by Wells Fargo Clearing Services, LLC (WFCS) and Wells Fargo Adv= isors Financial Network, LLC (WFAFN), Members SIPC, separate registered bro= ker-dealers and non-bank affiliates of Wells Fargo & Company.

Deposit pr= oducts offered by Wells Fargo Bank, N.A. Member FDIC.

Please do not reply to this automate= d email.
25e9e-320-af15-97ab32818-a= 2656bd3_6328ae9a_5afb-62e7