Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id 8pTjCgQ4LGqGHQAAyTkJsw (envelope-from ) for ; Fri, 12 Jun 2026 10:47:00 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Fri, 12 Jun 2026 10:47:00 -0600 Received: from [122.11.177.81] (port=57004 helo=Exp.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.1) (envelope-from ) id 1wY521-000000001xD-2mms for info@behniwalgroup.com; Fri, 12 Jun 2026 10:47:00 -0600 From: " American Express | Loan Approved " To: info@behniwalgroup.com Date: 13 Jun 2026 00:43:06 +0800 Message-ID: <20260613004306.E2781707C3930BD2@Exp.net> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=10.1 X-Spam-Score: 101 X-Spam-Bar: ++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Personal loan approved: See details AMEX LOAN CENTER Account ending: 3XXXXX Content analysis details: (10.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: m.amex] 1.0 FROMSPACE Idiosyncratic "From" header format 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_SHORT Use of a URL Shortener for very short URL 2.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only X-Spam-Flag: YES Subject: Confirmation: Your personal loan has been approved
=

Personal loan approved: See details
3D"American =

AMEX LOAN CENTER

Account ending: 3XXXXX

Loan Protection Team=AE
<= /TABLE>
3D""

Your personal loan has been approved

<= /TD>

Congratulations, info!  Your application for = a personal loan has been approved. Your approved loan amount is $18= ,940.00, and the funds are scheduled to be disbursed on Mo= nday, June 15, 2026.

 

For security concerns, our system has identified p= otentially unusual activity regarding this loan request that requires verif= ication:

 

  • The loan application was submitted from an unfamiliar IP address = or geographic location.
  • The loan proceeds have been requested for disbursement to an acco= unt ending in 2893 at PenFed Credit Union, which differs from th= e account information currently associated with your profile.=20

     

    To help ensure the security of your account, we ki= ndly ask that you confirm whether you authorized this loan request and the = designated disbursement account.

     

    Do you initiated this loan request?

     

    Yes

     

            &n= bsp;            = ;             &= nbsp;       

    No

     

    =

     

    •  
     

    If you do NOT recognize this request, or if neither you nor an authorized pa= rty initiated it, please select the "No" option to cancel the application and secure your account immediate= ly.

     
    =

    Thank you for your Card Membership.

     

     

    American Express Customer Care

    3D"Don't
    =
    <= /TBODY>
    <= /TABLE>

    Your account information is included above to help= you recognize this as a customer care email from American Express. To lear= n more about email security or report a suspicious email, please visit us a= t americanexpress.com/phishing. We kindly= ask you not to reply to this email but instead contact us via Customer Care.

    =A9 2026 American Express. All rights reserved.

     

    SAM0FYI016

    <= IMG style=3D"WIDTH: 1px; MIN-HEIGHT: 1px" alt=3D"" src=3D"https://ecp.yuser= content.com/mail?url=3Dhttps%3A%2F%2Fm.amex%2Fopentrack%3Fcomm_track_id%3Dr= _3309d864-8342-47b7-8bf1-8ce16f7608b8PR_1_x%26dotAmexDomain%3Dm&t=3D177= 3221264&ymreqid=3D63c8b8b7-6adb-e7b2-1c7d-7903fc010600&sig=3D9rYywy= GcnsDtK4xm3.I5IQ--~D" width=3D1 height=3D1>
    =