Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id luxDDPtV6GkPQQAAyTkJsw (envelope-from ) for ; Tue, 21 Apr 2026 23:00:43 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Tue, 21 Apr 2026 23:00:43 -0600 Received: from 125-227-76-143.hinet-ip.hinet.net ([125.227.76.143]:60023 helo=yale.edu) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95) (envelope-from ) id 1wFPhZ-0004Ia-Jm for info@behniwalgroup.com; Tue, 21 Apr 2026 23:00:43 -0600 From: "Wells Fargo" To: info@behniwalgroup.com Date: 22 Apr 2026 12:58:27 +0800 Message-ID: <20260422125827.D63122E7586CF7CD@yale.edu> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=15.4 X-Spam-Score: 154 X-Spam-Bar: +++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: info. View details of your disputed transaction in the amount of $810.15. Dispute completed . Date 2026/4/22 p.m. 12:58:27 Thank you. We appreciate your business wellsfargo.com | Security Center | Contact Us Content analysis details: (15.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yusercontent.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [125.227.76.143 listed in psbl.surriel.com] 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message and the domain has a DMARC quarantine policy 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 MIXED_HREF_CASE Has href in mixed case 3.5 URI_WP_HACKED URI for compromised WordPress site, possible malware 0.0 T_REMOTE_IMAGE Message contains an external image 2.0 KAM_SENDGRID2 Sendgrid being exploited by scammers X-Spam-Flag: YES Subject: Dispute Completed

Dispute completed
.
Date 2026/4/= 22 p.m. 12:58:27

Thank you. We appreciate your business

<= /TD>
=
Deposit products offered by Wel= ls Fargo Bank, N.A. Member FDIC.

Please do not reply to this automated email.&nbs= p;