Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id 8KkJEZefGWqHKgAAyTkJsw (envelope-from ) for ; Fri, 29 May 2026 08:15:51 -0600 Return-path: Envelope-to: info@behniwalgroup.com Delivery-date: Fri, 29 May 2026 08:15:51 -0600 Received: from [41.83.172.26] (port=52959 helo=secure.com) by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.1) (envelope-from ) id 1wSy07-000000002rd-0LTv for info@behniwalgroup.com; Fri, 29 May 2026 08:15:51 -0600 From: "Intuit Payments" To: info@behniwalgroup.com Date: 29 May 2026 14:16:17 +0000 Message-ID: <20260529141617.1E8340DCC9FE3875@secure.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=22.2 X-Spam-Score: 222 X-Spam-Bar: ++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: info@behniwalgroup.com, This message is an automatic response message as a result of a failed payment from a customer. A customer payment was rejected due to incomplete billing. Help us prevent issues like this by reviewing your account. Content analysis details: (22.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ivolucion.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [41.83.172.26 listed in psbl.surriel.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message and the domain has a DMARC quarantine policy 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 3.5 URI_WP_HACKED URI for compromised WordPress site, possible malware X-Spam-Flag: YES Subject: Intuit Payments Deposit info@behniwalgroup.com,

This message is an automatic response messag= e as a result of a failed payment from a customer. A customer payment was r= ejected due to incomplete billing.

Help us prevent issues like this = by reviewing your account.

= REVIEW PAYMENT


Thank You,
QuickBooks Payment Team