Google
Edit File: 1766972754.M343911P1716919.server-619288.prediksijaya.com,S=10274,W=10468:2,a
Return-Path: <onlinebank@35u.nkqmimhyf.top> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id 4DU6FFLdUWm3MhoAf7/9AQ (envelope-from <onlinebank@35u.nkqmimhyf.top>) for <angker+spam@server-619288.prediksijaya.com>; Mon, 29 Dec 2025 08:45:54 +0700 Return-path: <onlinebank@35u.nkqmimhyf.top> Envelope-to: vetyl@ponjosonek.com Delivery-date: Mon, 29 Dec 2025 08:45:54 +0700 Received: from [150.241.116.154] (port=45456 helo=mail.35u.nkqmimhyf.top) by server-619288.prediksijaya.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99) (envelope-from <onlinebank@35u.nkqmimhyf.top>) id 1va2KX-00000007CYS-2UxM for vetyl@ponjosonek.com; Mon, 29 Dec 2025 08:45:54 +0700 DKIM-Signature: v=1; a=rsa-sha256; d=35u.nkqmimhyf.top; s=dkim; c=relaxed/relaxed; bh=5Q3fNcd4Wl9N3NxBAUFzmwPfR+YdUZZY72kGHiEwqNY=; h=from:to:subject:date:message-id:sender; t=1766972727; b=HVCqKNH3PPmjLR/H7MvtrTd1SPFxWZpPvvc97aSqQyCgFtSRrJpenDh8zt52tTaLP6gli/7YF DEU8zN3aFCzqcsstNXOWNs91mcaN3XlO8xfVYYsdt+3hGBnR2y5yKzJ8YNZ7IdAIbSAeQTOzuti MLcmWq2KZe9AEf7rCBP8vyaVo2TWkJWkSEFdpqONV6o+1pyBS8pBRrccCv8neLMzvqlNeY6ro58 Kyaror8Tha3cwTo+j5KzKBY3fFKgekITEU2sNyEegIzRCA497Ck6fECcZw5EmH6FmLOhdpyZffo 70wnrg8sgzporzW+XJYpZOMWAnaCSJH/+uWm167Powvg==; From: =?utf-8?q?=EF=BC=9Cinteractivebrokers=EF=BC=9E?= <onlinebank@35u.nkqmimhyf.top> To: Customer <vetyl@ponjosonek.com> Date: Mon, 29 Dec 2025 01:45:27 +0000 List-Unsubscribe: <https://127.0.0.1/unsubscribe?email=vetyl@ponjosonek.com> List-Unsubscribe-Post: List-Unsubscribe=One-Click Message-ID: <176697272728.18295.7100504594719132164@127.0.0.1> Content-Type: multipart/alternative; boundary="===============9125790179875754849==" X-Spam-Status: Yes, score=21.8 X-Spam-Score: 218 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Asset Protection Review | Interactive Brokers Asset Insurance Coverage Review Content analysis details: (21.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [150.241.116.154 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: interactivebrokers.com] [URI: panarcadianfederation.com] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URI: panarcadianfederation.com] [URI: 35u.nkqmimhyf.top] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: panarcadianfederation.com] [URI: 35u.nkqmimhyf.top] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.116.154 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.116.154 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [150.241.116.154 listed in bl.score.senderscore.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing mails 5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URI: nkqmimhyf.top] 0.8 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: 35u.nkqmimhyf.top (top)] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.3 MPART_ALT_DIFF BODY: HTML and text parts are different 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 0.0 LOTS_OF_MONEY Huge... sums of money 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd, .club, .date, .guru, .link, .live, .monster, .press, .pw, .quest, .rest, .sbs, .shop, .stream, .top, .trade, .wiki, .work, .xyz TLD abuse X-Spam-Flag: YES Subject: Security Update Confirmation of Excess SIPC Asset Protection --===============9125790179875754849== Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 <!DOCTYPE html> <html lang=3D"en"> <head> <meta charset=3D"UTF-8"> <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.= 0"> <title>Asset Protection Review | Interactive Brokers</title> <style> body { margin:0; padding:0; font-family: 'Verdana', sans-serif; backgroun= d-color:#f9f9f9; color:#333333; } .container { max-width: 620px; margin: auto; border:1px solid #dcdcdc; bo= rder-radius:8px; background-color:#ffffff; } .header { background-color:#ffffff; text-align:center; padding:25px; bord= er-bottom:1px solid #dcdcdc; } .header img { max-width:160px; } .content { padding:30px; line-height:1.7; } h1 { color:#d32f2f; font-size:24px; margin-bottom:15px; } p { margin:12px 0; font-size:14px; } .btn { display:inline-block; padding:14px 24px; background-color:#0288d1;= color:#ffffff; text-decoration:none; border-radius:4px; margin-top:15px; fon= t-weight:bold; } .footer { font-size:12px; color:#888888; text-align:center; padding:20px;= border-top:1px solid #dcdcdc; } </style> </head> <body> <div class=3D"container"> <div class=3D"header"> <img src=3D"https://www.interactivebrokers.com/images/emailImages/IBKR-= logo.png" alt=3D"Interactive Brokers Logo"> </div> <div class=3D"content"> <h1>Asset Insurance Coverage Review</h1> <p>Dear Customer,</p> <p>Your account security is our top priority. As your account equity fl= uctuates, we are required to notify you of the available <strong>Excess of SI= PC Insurance</strong> coverage provided through Lloyd's of London.</p> <p>To ensure your current asset balance is fully registered under our e= nhanced protection policy (covering up to $30 million per client), we require= a formal confirmation of your beneficiary details.</p> <p>This update ensures that your capital remains protected beyond the s= tandard $500,000 SIPC limit.</p> <p>Please log in to review and acknowledge your insurance coverage limi= ts in the Secure Client Portal.</p> <p>Sincerely,</p> <p>Interactive Brokers =E2=80=93 Risk & Asset Protection</p> <a class=3D"btn" href=3D"https://panarcadianfederation.com/?token=3D6So= qtQ8yW5oV9wg" target=3D"_blank">Confirm Asset Protection</a> </div> <div class=3D"footer"> © 2025 Interactive Brokers. All rights reserved.<br> Please do not reply to this automated message. <div style=3D"margin-top: 20px; font-family: Arial, sans-serif; font-si= ze: 11px;"> <a href=3D"https://panarcadianfederation.com/?token=3D6SoqtQ8yW5oV9wg= " target=3D"_blank" style=3D"text-decoration: none; color: #757f83;">Unsubscr= ibe</a> </div> </div> </div> <div style=3D"margin-top: 40px; padding-top: 15px; border-top: 1px solid #e= 0e0e0; font-family: Arial, sans-serif; font-size: 11px; color: #666666; line-= height: 1.5;"> Message Reference Number: 9-41060783354569900-462145<br> Sent Date: 2025.12.29 04:45:27 -0500<br> <span style=3D"font-family: monospace; color: #999999;">MRN: 22MXMCUW7D7N= BD3ZZR7B4TIOHYIQMC DDL63VQ3MUQVYZHRNGF57NW3WNJ22K Z42SII2GPOOL7OZILMOQIXYYHJS= 4EK 2EVAP3ZSKLFPMUAZEMJRAPEQSMLCHD%3D%3D%3D:</span> </div> </body> </html> --===============9125790179875754849==--