Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id kIwZGhDhQGqmMAAAyTkJsw (envelope-from ) for ; Sun, 28 Jun 2026 02:53:36 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Sun, 28 Jun 2026 02:53:36 -0600 Received: from [61.72.138.201] (port=54993 helo=mail.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.4) (envelope-from ) id 1wdlGg-000000003Cv-2jYH for info@behniwalgroup.com; Sun, 28 Jun 2026 02:53:36 -0600 From: "Bank of America" To: info@behniwalgroup.com Date: 28 Jun 2026 17:52:55 +0900 Message-ID: <20260628175255.4FB4FCD21E504C49@mail.net> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=11.1 X-Spam-Score: 111 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear info, We're informing you of your recently approved refund. We completed our investigation on your unauthorized charges, and have sent you important information.. View Your Message This is a survey email from Bank of America. Bank of America has contracted wit [...] Content analysis details: (11.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sendibt3.com] 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message and the domain has a DMARC quarantine policy 2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only X-Spam-Flag: YES Subject: Review and Sign claim approval

Dear info,

We're = informing you of your recently approved refund.

We completed o= ur investigation on your unauthorized charges, and have sent you important = information..

&= nbsp; = &nbs= p; &n= bsp; View Your Message

This is a survey email from Bank of America. Bank of America= has contracted with Medallia, Inc. to conduct this survey which will help = us better serve you