Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id nXoPAYcwcmmFVgAAyTkJsw (envelope-from ) for ; Thu, 22 Jan 2026 07:13:27 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Thu, 22 Jan 2026 07:13:27 -0700 Received: from [212.11.64.32] (port=50778 helo=gmail.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1vivR7-0005k4-P7 for info@behniwalgroup.com; Thu, 22 Jan 2026 07:13:26 -0700 Reply-To: perodissa@gmail.com From: Etienne Goosse To: info@behniwalgroup.com Date: 22 Jan 2026 06:12:44 -0800 Message-ID: <20260122061244.41FAE18F309F2981@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=11.7 X-Spam-Score: 117 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Greetings, I have in front of me an abandoned transfer file containing details to an escrow account set up in your name. The file shows that you have correctly made an application to have your funds released to [...] Content analysis details: (11.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [212.11.64.32 listed in psbl.surriel.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.32 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.32 listed in bl.score.senderscore.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [perodissa[at]gmail.com] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL No description available. 1.5 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... X-Spam-Flag: YES Subject: READ THIS Greetings, I have in front of me an abandoned transfer file containing=20 details to an escrow account set up in your name. The file shows=20 that you have correctly made an application to have your funds=20 released to you. It is also clearly noted on the file that the=20 beneficiary could not handle the financial commitment required of=20 him. I have perfected plans to have these funds transferred to you=20 within the next 48hrs. Upon your confirmation, I will give you=20 further directives on what to do and the reason why you haven't=20 received your funds. Regards, Etienne Goosse