Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id v098MApfcGkPdAAAyTkJsw (envelope-from ) for ; Tue, 20 Jan 2026 22:07:22 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Tue, 20 Jan 2026 22:07:22 -0700 Received: from [188.170.83.243] (port=13402 helo=mail.incisiveonair.co.uk) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1viQR7-0007k4-EX for info@behniwalgroup.com; Tue, 20 Jan 2026 22:07:22 -0700 From: Chloe Date: Wed, 21 Jan 2026 08:06:39 +0300 Message-Id: <6381250de90c4bf5b653e5c02e48c290@incisiveonair.co.uk> To: info@behniwalgroup.com Reply-To: chloe@incisiveonair.co.uk List-Unsubscribe: =?utf-8?q?=3Chttps=3A=2F=2Fincisiveonair=2Eco=2Euk=2Funsubscribe=3Femail=3Dinfo=40behniwalg?= =?utf-8?q?roup=2Ecom&token=3Ddgfhrfgaf54df=3E?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=7.3 X-Spam-Score: 73 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hey! I’m really looking forward to getting to know you — here’s my profile link, all my photos are up there. You just need to sign up to see them. https://msft-ssp-useast.adnxs.com/click2?e=wqT_3QKjAfBDowAAAAMAxBkFAQjLxOLIBhCphtr2jdvx7XkYldCjl7D3m5lNIMv57w0omAIwmjw4jwNAh6mwxgJI8opOUABaA1VTRGIBBZBoAXABeJmgZ4ABiLwFiAEBkAECmAEFoAECqQGzeLEwRE7WP7EBE [...] Content analysis details: (7.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: cdnex.online] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cdnex.online] 0.8 KAM_COUK Scoring .co.uk emails higher due to poor registry security. 0.5 JMQ_SPF_ALL ASKDNS: SPF set to +all! [incisiveonair.co.uk TXT:v=spf1] [include:msgfocus.com +all] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [188.170.83.243 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [188.170.83.243 listed in sa-accredit.habeas.com] 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: cdnex.online (online)] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: YES Subject: =?utf-8?b?TGV04oCZcw==?= start getting to know each other. SGV5IQpJ4oCZbSByZWFsbHkgbG9va2luZyBmb3J3YXJkIHRvIGdldHRpbmcgdG8ga25vdyB5 b3Ug4oCUIGhlcmXigJlzIG15IHByb2ZpbGUgbGluaywgYWxsIG15IHBob3RvcyBhcmUgdXAg dGhlcmUuCllvdSBqdXN0IG5lZWQgdG8gc2lnbiB1cCB0byBzZWUgdGhlbS4NCg0KaHR0cHM6 Ly9tc2Z0LXNzcC11c2Vhc3QuYWRueHMuY29tL2NsaWNrMj9lPXdxVF8zUUtqQWZCRG93QUFB QU1BeEJrRkFRakx4T0xJQmhDcGh0cjJqZHZ4N1hrWWxkQ2psN0QzbTVsTklNdjU3dzBvbUFJ d21qdzRqd05BaDZtd3hnSkk4b3BPVUFCYUExVlRSR0lCQlpCb0FYQUJlSm1nWjRBQmlMd0Zp QUVCa0FFQ21BRUZvQUVDcVFHemVMRXdSRTdXUDdFQkVRb291UUVBQUFEZ2VoVG1QOEVWSGdE SkZRbzgyQUdPdlFMZ0FRRHdBY2U4QXZnQkFBLi4vcz0xM2IzYzA4OWE4YTU3MTA3NWM3MDI4 YWQ1OTJmZmU0NmQ0NGZjNmRlL2Jjcj1BQUFBQUFBQThEOD0vcHA9MC4zNS9ibj04OTYwOC9j bGlja2VuYz1odHRwcyUzQSUyRiUyRmNkbmV4Lm9ubGluZSUyRmM3a2lsMWsucGhwJTNGa2V5 JTNEc2QwOHhmMXM4dWRvdGozdnp6cDIlMjZlJTNEaW5mbyU0MGJlaG5pd2FsZ3JvdXAuY29t JTI2bCUzRGVu