Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id QH+4Mt/KLGpxCAAAyTkJsw (envelope-from ) for ; Fri, 12 Jun 2026 21:13:35 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Fri, 12 Jun 2026 21:13:35 -0600 Received: from [85.121.148.159] (port=61908 helo=come.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.1) (envelope-from ) id 1wYEoQ-000000000YE-1Vrq for info@behniwalgroup.com; Fri, 12 Jun 2026 21:13:35 -0600 From: " American Express | Non-Compliance " To: info@behniwalgroup.com Date: 13 Jun 2026 04:12:51 +0100 Message-ID: <20260613041251.33F32906877906B6@come.net> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=27.4 X-Spam-Score: 274 X-Spam-Bar: +++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Account is suspended due to non-compliance issue info Account starting: 3xxxxx Content analysis details: (27.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: americanexpress.com] 1.0 FROMSPACE Idiosyncratic "From" header format 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [85.121.148.159 listed in psbl.surriel.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=non-compliance_info%40come.net;ip=85.121.148.159;r=server.rnv.kpw.mybluehostin.me] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=come.net;ip=85.121.148.159;r=server.rnv.kpw.mybluehostin.me] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.5 KAM_PHISH4 Another phishing attempt 0.0 KAM_SHORT Use of a URL Shortener for very short URL 2.0 MIXED_HREF_CASE Has href in mixed case 2.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS 2.8 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: Your account has been temporarily hold due to non-compliance

Account is suspended due to non-compliance is= sue

=

info

Account starting: 3xxxxx

<= /TABLE>

3D"Alternate

Account on hold due to non-compliance issues

=

Your account has been temporarily placed on = hold due to non-compliance with the American Express Terms and Conditions. = During a recent account review, we identified that certain required informa= tion is either missing or could not be verified, including:

Security question details=20
Mailing address details

To ensure the security and integrity of your= account, all card and merchant transaction activity has been temporarily p= laced on suspension until the requested information is updated and successf= ully verified.

Please use the secure update link provided below to review and upd= ate your account information promptly.

.

=

Update your account

Once your information has been successfully submit= ted and verified by our Protection Team, your account access will be fully = restored within 24 hours, and all transaction restrictions will be removed.=

American Express Protection Team<= /P>

<= /TR>

EXPLORE MORE WITH YOUR AMERICAN EXPRESS^® CARD

=

3D"A=

<= /DIV>

=

3D"Alternate

<= /TD>

Update your email address

Your account information is included above to help= you recognize this as a customer care email from American Express. To lear= n more about email security or report a suspicious email, please visit us a= t americanexpress. com / phishing. We k= indly ask you not to reply to this email but instead contact us via Customer Care.

*iOS and Android™ only. See app store listin= gs for operating system info.

© 2026 American Express. All rights reserved.=

SPB0CTA114

<= IMG style=3D"WIDTH: 1px; MIN-HEIGHT: 1px" alt=3D"" src=3D"https://ecp.yuser= content.com/mail?url=3Dhttps%3A%2F%2Fm.amex%2Fopentrack%3Fcomm_track_id%3Dr= _ICN7393444351778719706478_1_c&t=3D1779471284&ymreqid=3D63c8b8b7-6a= db-e7b2-1c4b-5a000f017c00&sig=3Du1LOEWf_SNDKdl2rqfT6MQ--~D" width=3D1 h= eight=3D1>

<= /TD>

=