Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id WEXzAHUDPWqMKQAAyTkJsw (envelope-from ) for ; Thu, 25 Jun 2026 04:31:17 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Thu, 25 Jun 2026 04:31:17 -0600 Received: from 61-31-230-44.static.tfn.net.tw ([61.31.230.44]:49753 helo=securedata.net) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.4) (envelope-from ) id 1wchMZ-000000002ow-1DlN for info@behniwalgroup.com; Thu, 25 Jun 2026 04:31:16 -0600 Reply-To: danconmiriam@gmail.com From: "Admin" To: info@behniwalgroup.com Date: 25 Jun 2026 18:30:32 +0800 Message-ID: <20260625183030.99FA612AA699BEAD@securedata.net> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=11.8 X-Spam-Score: 118 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Re: Fund Recovery My name is Maria Dancon Director for exchange Global Nexus Trading Company Attention; Content analysis details: (11.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [61.31.230.44 listed in psbl.surriel.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.6 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) X-Spam-Flag: YES Subject: :Your Funds Recovery

Re: Fund Recovery

My name is Maria Dancon
Director for exchange
Global Nexus Trading Company

At= tention;

We deal with Helping people to retrieve their unclaimed funds with the powe= r of our legal team regardless of the bank involved. ETC=
Why I contacted you is because our = legal team discovered a particular funds diverting in your name
<= SPAN style=3D"COLOR: rgb(0,0,128)"> It will interest you to know that we can help you retrieve your fund into o= ur investment platform with the power of our legal team and without you spe= nding /paying any money as a fee. Then from our platform you can withdraw f= reely and invest with us too. If it will interest you, all we need from you= is your approval and register an account on our platform freely. Then our = legal team will take it up for you till the total sum will be credited into= your account through our platform. When=20 registering, please make sure your account is verify with a valid ID=

Director for exchange
Global Nexus Trading Company.