Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id ++A1DMeDJWqqKAAAyTkJsw (envelope-from ) for ; Sun, 07 Jun 2026 08:44:23 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Sun, 07 Jun 2026 08:44:23 -0600 Received: from 1-163-174-211.dynamic-ip.hinet.net ([1.163.174.211]:65534 helo=secureserver.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.1) (envelope-from ) id 1wWEjb-000000002gH-1l3j for info@behniwalgroup.com; Sun, 07 Jun 2026 08:44:23 -0600 From: "Capital One" To: info@behniwalgroup.com Date: 07 Jun 2026 22:43:37 +0800 Message-ID: <20260607224337.B88F05AB360C8BF2@secureserver.net> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0012_B08472B7.2C3729AE" X-Spam-Status: Yes, score=14.5 X-Spam-Score: 145 X-Spam-Bar: ++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Sign In Do you recognize this purchase? About a purchase on your Credit Card Content analysis details: (14.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ctrlshiftc.com] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: ctrlshiftc.com] 0.0 TVD_RCVD_IP Message was received from an IP address 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=soft%40secureserver.net;ip=1.163.174.211;r=server.rnv.kpw.mybluehostin.me] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=secureserver.net;ip=1.163.174.211;r=server.rnv.kpw.mybluehostin.me] 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 GOOG_REDIR_FRAUD Google redirect to obscure spamvertised website + fraud keywords 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 1.1 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised website + HELO is not rDNS 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.3 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic rDNS X-Spam-Flag: YES Subject: Please Verify a Recent Credit Card Purchase ------=_NextPart_000_0012_B08472B7.2C3729AE Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Do you recognize this purchase?

About a purchase on your Credit Card=

Please let us know if you or an authorized user re= cognize the purchase below. The sooner we hear from you, the sooner we can = help protect your account from unauthorized purchases.

Date	Merchant Name	Amount	Outcome
June&= nbsp;07, 2026	AMZN = AMAZONY7992D72	$1,43= 5.00	Pendi= ng

Yes, I Recognize It

=

=

No, Something’s Wrong

Some things to consider when revi= ewing your purchase:

If you respond yes, declined transact= ions will stay declined. After responding, try your card again.=20
To cancel a legitimate purchase, cont= act the merchant directly.=20
A pre-authorization can differ from y= our transaction amount because merchants (typically gas stations) estimate = your amount (usually $1–$100) before the transaction is complete.

If you’ve already resolved this, yo= u can ignore this email or sign in to your account to check out the details.

To speak to a customer representative in = Spanish, please call us at the number on the back of your card. / Para habl= ar con un representante de servicio al cliente en español, por favor= llámanos al número que aparece en el reverso de tu tarjeta.<= /P>

3D"Download

Download the Capital One M= obile app.

About This Message

The site may be unavailable during normal maintena= nce or due to unforeseen circumstances.

Important information from Capital One

Contact us &= nbsp;| Privacy = ; | Help pre= vent fraud

To ensure delivery, add capitalone@notification.capitalone.com to your addres= s book.

This email was sent to info@behniwalgroup.com and contains information = directly related to your account with us, other services to which you have = subscribed, and/or any application you may have submitted.

Capital One does not provide, endorse or = guarantee any third-party product, service, information or recommendation l= isted above. The third parties listed are not affiliated with Capital = One and are solely responsible for their products and services. All tradema= rks are the property of their respective owners.

Please do not reply to this message, as t= his email inbox is not monitored. To contact us, visit www.capitalon= e.com/help-center/contact-us.

Products and services are offered by Capi= tal One, N.A.

© 2026 Capital One. Capital&nbs= p;One is a federally registered service mark.

FRD2WY 10049 350457 1056

------=_NextPart_000_0012_B08472B7.2C3729AE Content-Type: image/png; name="iconsocmb3x.png" Content-Transfer-Encoding: base64 Content-ID: iVBORw0KGgoAAAANSUhEUgAAAFEAAABRCAMAAACdUboEAAAAA3NCSVQICAjb4U/gAAAAMFBM VEVHcExmZ2dZWVlmaGhiYmJlZWVjZWVmZ2dmZ2dlZmZmZ2dlZmZmZ2dmZ2dmZ2dnaGjkFql8 AAAAD3RSTlMA9gjoFDAhxNhDllurboO2EdFDAAADIUlEQVRYha1ZWZaEIAxs9p2+/21HEJWd YE99Oe851VmKJMTPZwnKlTLOOWMUp+vXF2BGC4K+FxAR2jH8lg0zLx6yDFKrN6TUiR7bRer5 Jh/3ZMIXA6DZjn1LvpMTbKeRAL4A4kDxpBbIFyAAriuogclMsyJ0Xb3MoKeeY73Ld8BODhLe CeEDMaR8STihfOPylNK/Jjxi2UuP+YHw+/UtIduWTYlGl3hWaSAg9SH/JYgnLNBnhBA5ICPC ExpGp/A78xkRKYTV3oe+whjnnFKKE45HztjRdbwWsq54MpeQOmgOFndwcAqs+JiGJpRbnOeb QmkaWm7sTdok5y2eDtIR5UvQdH7J7+38hkFFuvkJ+jqan+sMi/MPKlGQHYqyE9bqkPJt+2Ml RGfbUT1hE2m92ZlHThYXn8dlEUlroIqg5HYbz5sfEg5EejKiEC2+LGMEMjwkGvWBVVrilxFN 2Qgih9Wx5fCQshFqGrABkjklTydRHs/Q4i2nEr0EcxzERaoz6AnhXbERT1mHAI39zio2A4jn hlv6/A3y2WC0I8JcgP/CqHKK/2BURSa2GPvJZmVq1Uau20GktTDkGq5H1KsXNWF4CTzw9MJo 6piF5gUebFVL6JqXwrmGzlCi4evdA4IjwEkUNSZ2r1KhPgLl00iHdVMafheW7KaWNTk5PYl6 gFwRap9HV6kz2L1+XaMqO2wkuXOWApyaSopm9B9XCV26XV6A6Pj9S2Ert2Vx/GbX5Ss4i5tH 0QWxn4jtmR+nIi8IhymJeGbcmSRzwqmB5Rw+NjInnBtYjuHDSEoGNbCewlX/7SzLallHqxLf 1Zi4CenKwPaK3UvOs9IA7JTa61F717zXLhxS5jttrarw6Na/g3TLbuct2gO5ytc6IwHdPUWx nLlGWqpBFX60nnkoU07wsGxVhMPJP1FeIVydkTVhKvbyDCGHOTxbckU4ZOMvwjIcMN/tBVfj C7AMfzORLVjBkwtkR3qAg/e466tYAnDXbHc2HVwv9+F2Zx8eOd3Md+J3+QKw0n1Sqc3rpQlm rvj28SXSulefKQpQFj/PuLgQWbP9AUS91UPeKn5sAAAAAElFTkSuQmCC ------=_NextPart_000_0012_B08472B7.2C3729AE Content-Type: image/gif; name="o.gif" Content-Transfer-Encoding: base64 Content-ID: R0lGODlhAQABAPAAAAAAAAAAACH5BAUAAAAALAAAAAABAAEAAAICRAEAOw== ------=_NextPart_000_0012_B08472B7.2C3729AE Content-Type: application/octet-stream; name="g5mzcwmx-mjxeag7uar-co3poeyi81bsgmq2et7vwcatxgqp9c5pc9wtxtj2ardchir5vuciphupj2xnn1qw~~" Content-Transfer-Encoding: base64 Content-ID: R0lGODlhAQABAPAAAAAAAAAAACH5BAUAAAAALAAAAAABAAEAAAICRAEAOw== ------=_NextPart_000_0012_B08472B7.2C3729AE--