Return-Path: <intuit.service@intuit.net>
Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me
Received: from server.rnv.kpw.mybluehostin.me
	by server.rnv.kpw.mybluehostin.me with LMTP
	id DsSQB9f1FWrkYAAAyTkJsw
	(envelope-from <intuit.service@intuit.net>)
	for <behniwal+spam@server.rnv.kpw.mybluehostin.me>; Tue, 26 May 2026 13:34:47 -0600
Return-path: <intuit.service@intuit.net>
Envelope-to: info@behniwalgroup.com
Delivery-date: Tue, 26 May 2026 13:34:47 -0600
Received: from [74.82.33.77] (port=51078 helo=intuit.net)
	by server.rnv.kpw.mybluehostin.me with esmtp (Exim 4.99.1)
	(envelope-from <intuit.service@intuit.net>)
	id 1wRxY4-000000006Qv-16WI
	for info@behniwalgroup.com;
	Tue, 26 May 2026 13:34:47 -0600
From: "QuickBooks Payments" <intuit.service@intuit.net>
To: info@behniwalgroup.com
Date: 26 May 2026 12:34:02 -0700
Message-ID: <20260526123402.D3175D09F2053024@intuit.net>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  info@behniwalgroup.com, Due to your customer's missing billing
    information, we were unable to process your payment. Login to intuit to fix
    this error. 
 Content analysis details:   (16.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?74.82.33.77>]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hedone.com.hk]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [74.82.33.77 listed in psbl.surriel.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=intuit.service%40intuit.net;ip=74.82.33.77;r=server.rnv.kpw.mybluehostin.me]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=intuit.net;ip=74.82.33.77;r=server.rnv.kpw.mybluehostin.me]
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:    Payments Deposit

info@behniwalgroup.com,<BR><BR>Due to your customer's missing billing infor=
mation, we were unable to process your payment.<BR><BR>Login to intuit to f=
ix this error.<BR><BR>
<A href=3D"https://hedone.com.hk/red/wx.htm">PENDING PAYMENT</A><BR>
<P><BR>Thank You,<BR>Intuit Team</P></BODY></HTML>