????
Your IP : 3.144.224.30
| Current Path : /home/innovagencyco/mail/new/ |
|
|
| Current File : /home/innovagencyco/mail/new/1729721364.M160472P2019913.imr70-cvps01.hostserv.co.za,S=7745,W=7899 |
Return-Path: <takedown-response+62456447@netcraft.com>
Delivered-To: innovagencyco@imr70-cvps01.hostserv.co.za
Received: from imr70-cvps01.hostserv.co.za
by imr70-cvps01.hostserv.co.za with LMTP
id 6AYaBhR0GWdJ0h4A+LLMVA
(envelope-from <takedown-response+62456447@netcraft.com>)
for <innovagencyco@imr70-cvps01.hostserv.co.za>; Thu, 24 Oct 2024 00:09:24 +0200
Return-path: <takedown-response+62456447@netcraft.com>
Envelope-to: info@innovagency.co.za
Delivery-date: Thu, 24 Oct 2024 00:09:24 +0200
Received: from spamtitan-filter03.hostserv.co.za ([41.185.250.30]:52365)
by imr70-cvps01.hostserv.co.za with esmtp (Exim 4.98)
(envelope-from <takedown-response+62456447@netcraft.com>)
id 1t3jXg-00000008TdR-2f3X
for info@innovagency.co.za;
Thu, 24 Oct 2024 00:09:23 +0200
Received: from localhost (localhost [127.0.0.1])
by spamtitan-filter03.hostserv.co.za (Postfix) with ESMTP id 7056B266C1F2
for <info@innovagency.co.za>; Thu, 24 Oct 2024 00:09:23 +0200 (SAST)
X-Quarantine-ID: <CAC6Fn0IHtSc>
X-Virus-Scanned: by SpamTitan at hostserv.co.za
X-Spam-Flag: NO
X-Spam-Score: 1.709
X-Spam-Level: *
X-Spam-Status: No, score=1.709 tagged_above=-999 required=5
tests=[ANY_BOUNCE_MESSAGE=0.1, BOUNCE_MESSAGE=0.1, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DNSWL_DWL_MED=-0.2, RCVD_IN_DNSWL_BLOCKED=0.001,
RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_SPFWL=-0.2,
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, ST_KGM_OBFUSCATE_1=0.4, ST_KGM_OBFUSCATE_2=0.8,
ST_LONG_ENVELOPE_FROM=0.906, URIBL_BLOCKED=0.001] autolearn=disabled
Received: from spamtitan-filter03.hostserv.co.za (localhost [127.0.0.1])
by spamtitan-filter03.hostserv.co.za (Postfix) with ESMTP id 25E56266C1D2
for <info@innovagency.co.za>; Thu, 24 Oct 2024 00:09:19 +0200 (SAST)
Authentication-Results: spamtitan-filter03.hostserv.co.za;
dkim=pass (2048-bit rsa key sha256) header.d=netcraft.com
header.i=@netcraft.com header.b=aD7OMpa0 header.a=rsa-sha256
header.s=default202405-yu9bqteb95aqcfpg x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
policy.policy-from=p header.from=netcraft.com;
spf=pass smtp.mailfrom=takedown-response+62456447@netcraft.com
smtp.helo=mail-1c.netcraft.com
Received-SPF: pass
(netcraft.com: 52.31.138.216 is authorized to use 'takedown-response+62456447@netcraft.com' in 'mfrom' identity (mechanism 'ip4:52.31.138.216' matched))
receiver=spamtitan-filter03.hostserv.co.za;
identity=mailfrom;
envelope-from="takedown-response+62456447@netcraft.com";
helo=mail-1c.netcraft.com;
client-ip=52.31.138.216
Received: from mail-1c.netcraft.com (mail-1c.netcraft.com [52.31.138.216])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by spamtitan-filter03.hostserv.co.za (Postfix) with ESMTPS id EA06B266C1DF
for <info@innovagency.co.za>; Thu, 24 Oct 2024 00:09:16 +0200 (SAST)
Received: from walleye.netcraft.com (unknown [10.9.0.81])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by mail-1c.netcraft.com (Postfix) with ESMTPS id ED0A6E22
for <info@innovagency.co.za>; Wed, 23 Oct 2024 22:09:13 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail-1c.netcraft.com ED0A6E22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netcraft.com;
s=default202405-yu9bqteb95aqcfpg; t=1729721354;
bh=4YfHX8P0spUrWHL90/L0wG55Do/GfjPnfqq44Vx/0QU=;
h=Date:From:Subject:To:From;
b=aD7OMpa0Yd71j14tmsBORpr56UeGvVnysPV/hQiaGDLKqDCvlbFv8J+VbSWNKx+Dg
EqrPIyKvsWzqLrVgYyhtnwdsoD2Gr4gUdoG9o+kEvvg767O1GEH7BnjchSc3f1xr7Q
WaLrXlp44xPmhZLzaK9e3yiuFgm93axskVrvU5OU7VgN0wd2qrHd7XEcWSoNdwpFQI
LAxxTDf4rvEIN2FFBVpgr1QnfdLN60GdPlEgzdOaT9ll1JALn7qOTw/jOn5WqY52Lo
QfrbtSenuz6sm5SnwbPxsTNvjaL7BB/q9o/4aICN17jyz/CgW5pWf40SBuR1ZxxAo5
nJP3pgjrL+m8w==
Received: by walleye.netcraft.com (Postfix, from userid 507)
id E93981179; Wed, 23 Oct 2024 22:09:13 +0000 (UTC)
Content-Transfer-Encoding: 8bit
Content-Type: multipart/report; boundary="_----------=_17297213532613634694"; report-type="feedback-report"
MIME-Version: 1.0
Date: Wed, 23 Oct 2024 22:09:13 +0000
From: Netcraft Takedown Service <takedown-response+62456447@netcraft.com>
Subject: Issue 62456447: Phishing attack at hxxps://isonxp.innovagency.co[.]za/wp-admin/x1/questions.html
To: info@innovagency.co.za
Message-Id: <095fb0cb61f3dcd201ebc8718baa6fb3@takedown.netcraft.com>
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
This is a multi-part message in MIME format.
--_----------=_17297213532613634694
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
Hello,
We have discovered a phishing attack on your network.
hxxps://isonxp.innovagency.co[.]za/wp-admin/x1/questions.html [41.185.64.77]
It is possible that this attack is being restricted so it is only visible from certain countries. Before deciding that the attack has been resolved please confirm it cannot be viewed from the following countries:
Australia
You may not have been aware of this attack, however, you are still responsible for removing it.
Please remove this fraudulent content, and any other associated fraudulent content, as soon as possible.
More information about the detected issue is provided at https://incident.netcraft.com/373c101fd6aa/
Kind regards,
Netcraft
Phone: +44(0)1225 447500
Fax: +44(0)1225 448600
Netcraft Issue Number: 62456659
To contact us about updates regarding this attack, please respond to this email. Please note: replies to this address will be logged, but aren't always read. If you believe you have received this email in error, or you require further support, please contact: takedown@netcraft.com.
This mail can be parsed with x-arf tools. Visit http://www.xarf.org/ for more information about x-arf.
--_----------=_17297213532613634694
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: message/feedback-report
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Wed, 23 Oct 2024 22:09:13 +0000
Feedback-Type: xarf
User-Agent: Netcraft
Version: 1
--_----------=_17297213532613634694
Content-Disposition: attachment; filename="xarf.json"
Content-Transfer-Encoding: base64
Content-Type: application/json; charset=utf-8; name="xarf.json"
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Wed, 23 Oct 2024 22:09:13 +0000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--_----------=_17297213532613634694--