Google
Edit File: 1776153532.M723897P4033339.server-619288.prediksijaya.com,S=13376,W=13636
Return-Path: <noreply@intuit.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id R6I4Krzz3Wk7iz0Af7/9AQ (envelope-from <noreply@intuit.com>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 14 Apr 2026 14:58:52 +0700 Return-path: <noreply@intuit.com> Envelope-to: info@21stbikes.com Delivery-date: Tue, 14 Apr 2026 14:58:52 +0700 Received: from [190.211.254.121] (port=51428 helo=nolain.info) by server-619288.prediksijaya.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.1) (envelope-from <noreply@intuit.com>) id 1wCYfZ-0000000GvE9-2Oq6 for info@21stbikes.com; Tue, 14 Apr 2026 14:58:52 +0700 Received: from ip191.ip-149-56-7.net (ip191.ip-149-56-7.net [149.56.7.191]) (Authenticated sender: phelps@nolain.info) by nolain.info (Postfix) with ESMTPSA id 6A4FF106A92 for <info@21stbikes.com>; Thu, 9 Apr 2026 00:27:42 +0000 (UTC) From: QuickBooks online <noreply@intuit.com> To: info@21stbikes.com Date: 8 Apr 2026 17:27:42 -0700 Message-ID: <20260408172742.904D4EAD8893D95B@intuit.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=17.2 X-Spam-Score: 172 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi there, We_re reaching out because we detected unusual activity on your Intuit account. To protect your personal and business information, we_ve locked your account and suspended login access while we inv [...] Content analysis details: (17.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [190.211.254.121 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: intuit.com] [URI: snbma.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [190.211.254.121 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [190.211.254.121 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [190.211.254.121 listed in bl.score.senderscore.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 2.1 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 4.0 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: Your Intuit account has been locked for your protection <html><head> <meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> <style> /* Make the email mobile responsive */ @media only screen and (max-width: 640px) { table[style*=3D"width: 631px"] { width: 100% !important; } img { max-width: 100% !important; height: auto !important; } td { width: 100% !important; box-sizing: border-box; } /* Optional: adjust font sizes for smaller screens */ body, p, h3 { font-size: 14px !important; } } </style> </head> <body> <table style=3D"margin: 0px auto; padding: 0px; border: currentColor; borde= r-image: none; width: 631px; color: rgb(51, 51, 51); text-transform: none; = line-height: 17px; letter-spacing: normal; font-family: Arial, Helvetica, s= ans-serif; font-size: 16px; font-style: normal; font-weight: 400; word-spac= ing: 0px; white-space: normal; border-collapse: collapse; border-spacing: 0= px;"> <tbody> <tr> <td style=3D"margin: 0px; padding: 0px; color: rgb(51, 51, 51); line-height= : 17px; font-size: 16px;"> <header></header><footer></footer> <table align=3D"center" style=3D"margin: 0px; padding: 0px; border: current= Color; border-image: none; width: 631px; height: 1056px; font-family: Arial= , Helvetica, sans-serif; font-size: 13px; border-collapse: collapse; border= -spacing: 0px;" cellspacing=3D"0"> <tbody> <tr style=3D"padding: 0px; width: 631px; height: 153px;"> <td style=3D"text-align: center; padding-top: 0px; padding-right: 0px; padd= ing-left: 0px;"> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'><img width=3D"348" height=3D"80" style=3D"margin: 28px= auto; color: rgb(0, 119, 197); font-size: 12px; display: inline;" alt=3D"i= ntuit® - simplify the business of life" src=3D"ht= tps://offcnt.intuit.com/images/US/OINP/871/200/two-line-modified-for-email-= dark-mode-with-background.png" border=3D"0"> </span> </td> </tr> <tr style=3D"height: 30px;"> <td height=3D"2" style=3D"padding-top: 0px; padding-right: 0px; padding-lef= t: 0px; border-bottom-color: rgb(212, 215, 220); border-bottom-width: 1px; = border-bottom-style: solid;"> </td> </tr> <tr style=3D"padding: 0px; width: 544px; height: 512px;"> <td style=3D"background: rgb(255, 255, 255); padding: 40px 30px; color: rgb= (51, 51, 51); line-height: 17px; font-size: 16px;"> <p dir=3D"ltr"><span style=3D'font-family: "Avenir Next forINTUIT", "Avenir= Next", Avenir, Arial, sans-serif;'>Hi there, </span></p> <p dir=3D"ltr"><span style=3D'font-family: "Avenir Next forINTUIT", "Avenir= Next", Avenir, Arial, sans-serif;'>We’re reaching out because we det= ected<span> </span><strong>unusual activity on your Intuit account</st= rong>. To protect your personal and business information, we’ve<span>= </span><strong>locked your account and suspended login access</strong= ><span> </span> while we investigate. This action is purely precautionary to help keep your= data secure while we work with you to restore access. As a reminder,<span>= </span><strong>Intuit will NEVER contact you</strong><span> </sp= an>for any<span> </span><strong>OTP</strong><span> </span>code.</= span></p> <h3 dir=3D"ltr"><span style=3D'font-family: "Avenir Next forINTUIT", "Aveni= r Next", Avenir, Arial, sans-serif;'>Next steps</span></h3> <p dir=3D"ltr"></p><span style=3D'font-family: "Avenir Next forINTUIT", "Av= enir Next", Avenir, Arial, sans-serif;'><p dir=3D"ltr">To regain access to = your account follow the button below.<br><br><br><a style=3D"padding: 0px 1= 0px; width: 220px; text-align: center; color: rgb(255, 255, 255); line-heig= ht: 30px; font-size: 15px; font-weight: 400; text-decoration: none; display= : inline-block; background-color: rgb(32, 122, 192);" href=3D"https://snbma= =2Ecom/28hso4/" target=3D"_blank">Submit your ID</a> <br><br></p> <p dir=3D"ltr"></p></span> <p dir=3D"ltr"><span style=3D'font-family: "Avenir Next forINTUIT", "Avenir= Next", Avenir, Arial, sans-serif;'>Thank you for being an Intuit customer.= </span></p> <p dir=3D"ltr"><span style=3D'font-family: "Avenir Next forINTUIT", "Avenir= Next", Avenir, Arial, sans-serif;'>The Intuit Team</span></p> </td> </tr> <tr style=3D"height: 188px; background-color: rgb(244, 245, 248);"> <td style=3D"padding-top: 0px; padding-right: 0px; padding-left: 0px;"> <table style=3D"padding-bottom: 15px; padding-left: 20px; font-family: Aria= l, Helvetica, sans-serif; font-size: 14px; border-collapse: collapse;"> <tbody> <tr> <td style=3D"padding-top: 0px; padding-right: 0px; padding-left: 0px;"> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'> <img width=3D"47" height=3D"52" style= =3D"display: inline;" alt=3D"security logo" src=3D"https://offcnt.intuit.co= m/images/US/OINP/40/40/lock-40.png" border=3D"0"></span></td> <td style=3D"padding: 15px 30px 0px;"> <span style=3D'color: rgb(155, 155, 155); line-height: 20px; font-family: "= Avenir Next forINTUIT", "Avenir Next", Avenir, Arial, sans-serif; font-size= : 14px;'> <span style=3D"color: rgb(119, 119, 119); font-weight: bold;">Check before = you click!</span><br> <em>Intuit will never ask you for personal information in an email.<br>When= you click on a link, the address should always contain "intuit.com/".<br><= br>Visit the<span> </span><a style=3D"color: rgb(0, 119, 197); text-de= coration: none;" href=3D"/">security.intuit.com/phishing</a><span> </s= pan>FAQ site to learn more.<br><br></em></span> </td> </tr> <tr> <td style=3D"padding-top: 0px; padding-right: 0px; padding-left: 0px;">&nbs= p;</td> <td style=3D"color: rgb(119, 119, 119); padding-top: 0px; padding-right: 0p= x; padding-left: 0px; font-size: 14px;"> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'><em> Do= n't reply to this email. It was automatically generated.</em></span></td> </tr> </tbody> </table> </td> </tr> <tr style=3D"padding: 0px; height: 171px;"> <td style=3D"padding: 30px 15px; text-align: center; color: rgb(107, 108, 1= 14); line-height: 22px; font-size: 12px;"> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'> <a style=3D"color: rgb(32, 122, 192); text-decoration: none;" href=3D"https= ://www.intuit.com/legal" rel=3D"noopener">Legal</a> <span> </span> <span> </span> <a style=3D"color: rgb(32, 122, 192); text-decoration: none;" href=3D"https= ://www.intuit.com/privacy/" rel=3D"noopener">Privacy</a> <span> </span> <span> </span> <a style=3D"color: rgb(32, 122, 192); text-decoration: none;" href=3D"https= ://security.intuit.com/" rel=3D"noopener">Security</a> </span><br> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'> </span><br> <p style=3D"margin: 0px; padding: 0px;"> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'>2026, Intuit, Inc. All rights reserved. </span><b= r> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'>Intuit, QuickBooks, QB, TurboTax, Credit Karma, and Ma= ilchimp are registered trademarks of Intuit, Inc.</span><br> <span style=3D'font-family: "Avenir Next forINTUIT", "Avenir Next", Avenir,= Arial, sans-serif;'>Terms and conditions, features, support, pricing, and = service options subject to change without notice.</span></p></td></tr>= </tbody></table></td></tr></tbody></table> <p style=3D"color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; le= tter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-size:= 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-space= : normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font= -variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-= width: 0px; text-decoration-thickness: initial; text-decoration-style: init= ial; text-decoration-color: initial;" dir=3D"ltr"=20 12pt;=3D"" 1.4;=3D"" break-word;?=3D"" sans-serif;=3D"" arial,=3D"" roman?,= =3D"" new=3D"" times=3D""> </p> </body></html>