DMARC compliance via SPF.
This sender will use customer domain in envelope. Add include:cust-spf.cashnet.com to authorize.