Return-Path: <qbks@secure.net>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id h29cM65+RWmpKQAAyTkJsw
	(envelope-from <qbks@secure.net>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Fri, 19 Dec 2025 09:34:54 -0700
Return-path: <qbks@secure.net>
Envelope-to: info@behniwalgroup.com
Delivery-date: Fri, 19 Dec 2025 09:34:54 -0700
Received: from 211-21-148-242.hinet-ip.hinet.net ([211.21.148.242]:51167 helo=secure.net)
	by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.95)
	(envelope-from <qbks@secure.net>)
	id 1vWdRN-0002kz-Aj
	for info@behniwalgroup.com;
	Fri, 19 Dec 2025 09:34:54 -0700
From: QuickBooks Payment <qbks@secure.net>
To: info@behniwalgroup.com
Date: 20 Dec 2025 00:34:01 +0800
Message-ID: <20251220003401.849318A909D35861@secure.net>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  [-Email-]], A new authentication system will be implemented
    for QuickBooks Payments. In order to continue processing payments, you'll
    need to confirm your Intuit user ID and password immediately. 
 Content analysis details:   (10.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: mu-tokushima.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [211.21.148.242 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [211.21.148.242 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [211.21.148.242 listed in bl.score.senderscore.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  2.5 KAM_LINKBAIT           Short messages containing little more than a link,
                             from a domain with no security in place
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:      Payment System Alert

[-Email-]],<BR><BR>A new authentication system will be implemented for Quic=
kBooks Payments.<BR><BR> In order to continue processing payments, you'll n=
eed to confirm your Intuit user ID and password immediately.<BR><BR>For mor=
e information about confirming your user ID or setting one up, check out ou=
r website below and follow the automatic guide<BR><BR>
<A href=3D"https://mu-tokushima.com/wx.htm">www.intuit.com</A> <BR>
<P><BR>Sincerely,<BR>The QuickBooks Payments Team</P></BODY></HTML>