Return-Path: Delivered-To: behniwal@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id 6UHOBQJ7N2lYSQAAyTkJsw (envelope-from ) for ; Mon, 08 Dec 2025 18:27:30 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Mon, 08 Dec 2025 18:27:30 -0700 Received: from 47-190-176-35.static.grpv.tx.ip.frontiernet.net ([47.190.176.35]:54481 helo=servicemail.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1vSmVk-0004s5-JJ for info@behniwalgroup.com; Mon, 08 Dec 2025 18:27:30 -0700 From: "Capital One" To: info@behniwalgroup.com Subject: Attention Required: Immediate Review of Suspicious Spending Patterns Date: 08 Dec 2025 19:26:48 -0600 Message-ID: <20251208192648.5EC06B0E6C12369E@servicemail.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=2.1 X-Spam-Score: 21 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Urgent Request to Review Suspicious Spending Patterns, Fraud Report Our monitoring systems flagged transactions that appear inconsistent with your typical spending behavior. While we cannot disclose specific details for security reasons, this may include unexpected pu [...] Content analysis details: (2.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: capitalone.com] 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [47.190.176.35 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [47.190.176.35 listed in sa-trusted.bondedsender.org] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML 0.9 URG_BIZ Contains urgent matter 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods X-Spam-Flag: NO

=

Urgent Request to Review Sus= picious Spending Patterns, Fraud Report

Our monitori= ng systems flagged transactions that appear inconsistent with your typical = spending behavior. While we cannot disclose specific details for security r= easons, this may include unexpected purchases, geographic irregularities, o= r high-frequency activity:

= ;

To protect y= our account from potential fraud, we have temporarily locked it as a precau= tionary measure and immediate action is required.

&nb= sp;

Review your account Now

Check your transaction history for any unauthorized charges. If you reco= gnize suspicious activity, report it immediately.

If fraudulent transactions are confirmed, Capital One will issue a provi= sional credit and investigate further. You will not be held responsible for= unauthorized charges.

&nb= sp;

&n= bsp;

Highlights of your changes from
September 19, 2025 to October 17, 2025

=20

Payment history
9/9 account payments made on time

To lenders, your history o= f on-time payments indicates whether you’ll make payments on time in = the future.

<= /TD>

&n= bsp;

=20

New accounts
0 new accounts

To lenders, opening too ma= ny new accounts in a short window of time could point to credit problems.

<= /TD>

&n= bsp;

=20

Credit usage
30 % ? 27% of total credit used

See how much credit you ar= e using compared to your total credit—the lower your credit usage, th= e better.

&n= bsp;

<= /TBODY>

See your score

&nb= sp;

Check your credit score and other key f= actors with the CreditWise app.
Download the CreditWise mobile app today.

&nb= sp;

About this message

The CreditWise Si= mulator provides an estimate of your score change and does not guarantee ho= w your score may change.

Web access is needed to use the mobile app. Check wi= th your service provider for details on specific fees and charges.

Important information from Capital&nb= sp;One

To ensure delivery, add = ;capitalone@notification.capitalone.com<= /SPAN> to your address book.

This email was sent to = jw@allermetrix.com = ; and contains information directly related to your CreditWise account (inclu= ding CreditWise alerts) and other services to which you have subscribed. If= you no longer want to receive these emails, unfortunately you’ll hav= e to unenroll from CreditWise =2E

Where does my Cre= ditWise score come from?
The credit score provided in CreditWise is a FICO® Score 8 based on Tra= nsUnion® data. The FICO Score 8 gives you a good sense of your credit h= ealth, but it may not be the same score model used by your lender or credit= or. The availability of the CreditWise tool and certain features in the too= l depends on our ability to obtain your credit history from TransUnion and = whether you have sufficient credit history to generate a FICO Score 8. Some= monitoring and alerts may not be available to=20 you if the information you enter at enrollment does not match the informati= on in your credit file at (or you do not have a file at) one or more consum= er reporting agencies.

Capital One does = not provide, endorse or guarantee any third-party product, service, informa= tion or recommendation listed above. The third parties listed are not affil= iated with Capital One and are solely responsible for their products a= nd services. All trademarks are the property of their respective owners.

Please do not rep= ly to this message, as this email inbox is not monitored. <= SPAN class=3Dv1textLink style=3D"BOX-SIZING: border-box; TEXT-DECORATION: u= nderline; text-underline-offset: 1px"> To contact us, visit www.capitalone.com/help-center/contact-us.<= /P>

Products and serv= ices are offered by Capital One, N.A.

FICO is a registe= red trademark of Fair Isaac Corporation in the United States and other coun= tries.

CWMR24 4910= 8 3378634

TP1001