Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id UNKEHi0Zz2ldVQAAyTkJsw (envelope-from ) for ; Thu, 02 Apr 2026 19:34:37 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Thu, 02 Apr 2026 19:34:37 -0600 Received: from 125-227-76-143.hinet-ip.hinet.net ([125.227.76.143]:53098 helo=rcn.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1w8TQh-0005em-LG for info@behniwalgroup.com; Thu, 02 Apr 2026 19:34:37 -0600 From: Wells Fargo To: info@behniwalgroup.com Date: 03 Apr 2026 09:33:07 +0800 Message-ID: <20260403093307.1C9A735D499E568A@rcn.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=9.2 X-Spam-Score: 92 X-Spam-Bar: +++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Unauthorized charges Your disputed transaction in the amount of $1,650.0 has been reviewed and adjusted. Credit adjustment Thank you for choosing Wells Fargo. Content analysis details: (9.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yusercontent.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [125.227.76.143 listed in sa-trusted.bondedsender.org] 1.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [125.227.76.143 listed in bl.score.senderscore.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 LOTS_OF_MONEY Huge... sums of money 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML X-Spam-Flag: YES Subject: =?UTF-8?B?IFlvdXIgZGlzcHV0ZSBpcyBjb21wbGV0ZSDinIU=?=

Your disputed transaction in = the amount of $1,650.0 has been reviewed and adjusted.
     = ;            Credit adjustment


Thank you for choosing = Wells Fargo.

Pl= ease do not reply to this automated email.

If you have any questions about= your account, please refer to the contact information on your statement. f= or questions about viewing your statements or making a payment online, Well= s Fargo Online service is available 24 hours a day, 7 days a week. call us = at 1-800-954-4442.

=
Investment products and service= s are offered through Wells Fargo Advisors. Wells Fargo Advisors is a trade= name used by Wells Fargo Clearing Services, LLC (WFCS) and Wells Fargo Adv= isors Financial Network, LLC (WFAFN), Members SIPC, separate registered bro= ker-dealers and non-bank affiliates of Wells Fargo & Company.

Deposit products offered by Wells Farg= o Bank, N.A. Member FDIC.

Please do not reply to this automated email.
25e9e-320-af15-97ab32818-a= 2656bd3_6328ae9a_5afb-62e7