Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id mAopOUMsBGqTYwAAyTkJsw (envelope-from ) for ; Wed, 13 May 2026 01:46:11 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Wed, 13 May 2026 01:46:11 -0600 Received: from bulkmail.exco.ma ([185.239.49.152]:47580) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.1) (envelope-from ) id 1wN4IE-000000006fW-11Nx for info@behniwalgroup.com; Wed, 13 May 2026 01:46:11 -0600 Received: by bulkmail.exco.ma (Postfix, from userid 0) id 5FA7B43986; Wed, 13 May 2026 03:25:17 +0300 (IDT) From: "Payments Team" To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="MULTIPART_BOUNDARY" Message-Id: <20260513002517.5FA7B43986@bulkmail.exco.ma> Date: Wed, 13 May 2026 03:25:17 +0300 (IDT) X-Spam-Status: Yes, score=6.3 X-Spam-Score: 63 X-Spam-Bar: ++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Webmail - Mail. Host. Online Email Account Status Changed Hi info, Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: www-sueua-com.translate.goog] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: www-sueua-com.translate.goog] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [185.239.49.152 listed in psbl.surriel.com] -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: FW: Payment Release Form - Doc #7817 --MULTIPART_BOUNDARY Content-Type: text/plain; charset=UTF-8 Webmail - Mail. Host. Online Email Account Status Changed Hi info, Contract Payment Approved " Please reconfirm this order before we release payment." Use the button below to review the order and sign document(s) ACCESS DOCUMENTS --MULTIPART_BOUNDARY Content-Type: text/html; charset=UTF-8

Contract Payment Approved

info

" Please reconfirm this order before we release payment."

Use the button below to review  the order and sign document(s)

Email For
info@behniwalgroup.com

All parties have completed Documents for your DocuSign Signature.

I am sending you this request for your electronic signature, please review and electronically sign by following the link below.

Do Not Share This Email
This email contains a secure link to Docusign. Please do not share this email, link, or access code with others.

If you have trouble signing, visit "How to Sign a Document" on our  Docusign Support Center, or browse our  Docusign Community for more information.

Download the Docusign App

This message was sent to you by Michael Romey who is using the Docusign   Electronic Signature Service. If you would rather not receive email from this sender you may contact the sender with your request.

--MULTIPART_BOUNDARY--