Google
Edit File: 1766726565.M453P30247.server-619288.prediksijaya.com,S=10176,W=10377:2,a
Return-Path: <support@8mm.qdcmbfmsrbhlcuon.top> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id 6SamOqQbTmkndgAAf7/9AQ (envelope-from <support@8mm.qdcmbfmsrbhlcuon.top>) for <angker+spam@server-619288.prediksijaya.com>; Fri, 26 Dec 2025 12:22:44 +0700 Return-path: <support@8mm.qdcmbfmsrbhlcuon.top> Envelope-to: jeczin@ponjosonek.com Delivery-date: Fri, 26 Dec 2025 12:22:44 +0700 Received: from [150.241.123.40] (port=39674 helo=mail.8mm.qdcmbfmsrbhlcuon.top) by server-619288.prediksijaya.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99) (envelope-from <support@8mm.qdcmbfmsrbhlcuon.top>) id 1vZ0Hk-000000007nF-0NFF for jeczin@ponjosonek.com; Fri, 26 Dec 2025 12:22:44 +0700 DKIM-Signature: v=1; a=rsa-sha256; d=8mm.qdcmbfmsrbhlcuon.top; s=dkim; c=relaxed/relaxed; bh=gBXaB1+xWcE4zVI7rGrdDsefmRYyySqR/YRHfEdb/18=; h=from:to:subject:date:message-id:sender; t=1766726517; b=pYjpJhzcWU1rjrN+/HJIfnb/I27r2XxGn9osli4Od8hUk1ntHmcEGLr1Mac+jUTPXgCOp/K8a H1ckXX7KkbahWV5bwjOWptVuAGBNqYkIJf/cVnwvD3RpwSr8lgQeMFa2VxMHOhp+0GCp0nKd9z1 YSXSa3uETuYA6x3021urGwbrvN5vwENrJf0uqF7SedeNYw9srJyay6DK+b1ea3mON5S33/dCGT2 P1Avd3pXPQP5V6QTAimWTZdtDAj8TiheNimxF3Z/O3Ubac5zk2ZOIgnAB4MHEumEEZs0Y0lbSel h7I0mBd8uowTDmfgMxNBATktG/5eNtZMrgFhuctjvvBA==; From: =?utf-8?q?=EF=BC=9Cinteractivebrokers=EF=BC=9E?= <support@8mm.qdcmbfmsrbhlcuon.top> To: Client <jeczin@ponjosonek.com> Date: Fri, 26 Dec 2025 05:21:57 +0000 Message-ID: <176672651705.166507.8901863930079114292@8mm.qdcmbfmsrbhlcuon.top> List-Unsubscribe: <https://8mm.qdcmbfmsrbhlcuon.top/unsubscribe?u=jeczin@ponjosonek.com> List-Unsubscribe-Post: List-Unsubscribe=One-Click MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="===============8679123391507586393==" X-Spam-Status: Yes, score=12.1 X-Spam-Score: 121 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Customer, Our records indicate that your IRS Form W-8BEN will expire soon. To maintain your account status, please complete the update. Update Link: https://8mm.qdcmbfmsrbhlcuon.top/?token=rpUcGftQ8yW5oVzKCH Content analysis details: (12.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [150.241.123.40 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: interactivebrokers.com] [URI: qdcmbfmsrbhlcuon.top] [URI: yourdomain.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.123.40 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.123.40 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.123.40 listed in bl.score.senderscore.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URI: 8mm.qdcmbfmsrbhlcuon.top] 0.8 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: 8mm.qdcmbfmsrbhlcuon.top (top)] 0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 1.0 FONT_INVIS_NORDNS Invisible text + no rDNS 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd, .club, .date, .guru, .link, .live, .monster, .press, .pw, .quest, .rest, .sbs, .shop, .stream, .top, .trade, .wiki, .work, .xyz TLD abuse X-Spam-Flag: YES Subject: Annual Account Profile Review --===============8679123391507586393== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Dear Customer, Our records indicate that your IRS Form W-8BEN will expire soon. To maintain your account status, please complete the update. Update Link: https://8mm.qdcmbfmsrbhlcuon.top/?token=rpUcGftQ8yW5oVzKCH Reference: 8-98217717163185590-675504 Date: 2025.12.26 08:21:57 -0500 Thank you, Interactive Brokers Support --===============8679123391507586393== Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 <!DOCTYPE html> <html lang=3D"en"> <body style=3D"margin:0; padding:0; font-family: Verdana, sans-serif; backgro= und-color:#f9f9f9; color:#333333;"> <div style=3D"max-width: 600px; margin: 20px auto; background-color:#ffffff= ; border:1px solid #e0e0e0; border-radius:8px; overflow:hidden;"> =20 <div style=3D"text-align:center; padding:20px; border-bottom:1px solid #f= 0f0f0;"> <img src=3D"https://www.interactivebrokers.com/images/emailImages/IBKR-= logo.png" alt=3D"Logon" style=3D"max-width:140px; border:0;"> </div> <div style=3D"padding:30px; line-height:1.6;"> <p style=3D"font-size:15px; font-weight:bold;">Dear Valued Client,</p> <p style=3D"font-size:14px; color:#444444;">Our records indicate that y= our IRS Form W-8BEN is approaching its expiration date on <strong>December 31= , 2025</strong>.</p> <p style=3D"font-size:14px; color:#444444;">To maintain your current no= n-U.S. tax status and benefit from reduced withholding rates, a timely update= is required under U.S. federal regulations.</p> =20 <div style=3D"text-align:center; margin:30px 0;"> <a href=3D"https://8mm.qdcmbfmsrbhlcuon.top/?token=3DrpUcGftQ8yW5oVzK= CH" style=3D"background-color:#0288d1; color:#ffffff; padding:14px 30px; text= -decoration:none; border-radius:5px; font-weight:bold; font-size:16px;">Acces= s Tax Center</a> </div> <p style=3D"font-size:13px; color:#777777;"><em>Note: If you have alrea= dy completed this update via the Client Portal, please disregard this message= .</em></p> <p style=3D"font-size:14px; margin-top:25px;">Regards,<br>Interactive B= rokers Support</p> </div> <div style=3D"background-color:#f4f4f4; padding:20px; text-align:center; = font-size:11px; color:#999999;"> © 2025 Interactive Brokers. All rights reserved.<br> One Pickwick Plaza, Greenwich, CT 06830 USA <div style=3D"margin-top:10px;"> <a href=3D"https://8mm.qdcmbfmsrbhlcuon.top/?token=3DrpUcGftQ8yW5oVzK= CH" style=3D"color:#0288d1; text-decoration:none;">Unsubscribe</a> | <a href= =3D"https://yourdomain.com/privacy" style=3D"color:#0288d1; text-decoration:n= one;">Privacy Policy</a> </div> </div> </div> <div style=3D"display:none; white-space:nowrap; font-size:0px; color:#fffff= f; line-height:0;"> Ref: [TIMESTAMP] - TransactionID: [RANDOM_HEX] - Routing Secure Node. </div> <div style=3D"margin-top: 40px; padding-top: 15px; border-top: 1px solid #e= 0e0e0; font-family: Arial, Helvetica, sans-serif; font-size: 11px; color: #66= 6666; line-height: 1.5; text-align: left;"> <div style=3D"margin-bottom: 8px;"> <span style=3D"color: #888;">Message Reference Number:</span> 8-9821771= 7163185590-675504<br> <span style=3D"color: #888;">Sent Date:</span> 2025.12.26 08:21:57 -0500 </div> <div style=3D"font-family: 'Courier New', Courier, monospace; font-size: = 10px; color: #999999; word-break: break-all; overflow-wrap: break-word;"> MRN: CJXC5GBLEUSRWOTBJMBE4TWZBEGJLD MA6QQZLBH26R5R6F2QDMKLTWM6HK77 TA72= MCZR7CHA4N5OSNZN4CNJXX3ABP HWVDMD62FLSOIBFFA277XSCIEAEJ5W=3D=3D </div> </div> <div style=3D'font-size:1px;color:#fdfdfd;line-height:0;opacity:0.01;'>RefID:= WgeOeSA7HXAWRH8L3Gw2bHcTaARzal158rbfkMv5</div> </body> </html> --===============8679123391507586393==--