????
Your IP : 18.188.211.58
| Current Path : /home/innovagencyco/mail/new/ |
|
|
| Current File : /home/innovagencyco/mail/new/1729721365.M420009P2020570.imr70-cvps01.hostserv.co.za,S=7782,W=7936 |
Return-Path: <takedown-response+62456447@netcraft.com>
Delivered-To: innovagencyco@imr70-cvps01.hostserv.co.za
Received: from imr70-cvps01.hostserv.co.za
by imr70-cvps01.hostserv.co.za with LMTP
id ismlFBV0GWfa1B4A+LLMVA
(envelope-from <takedown-response+62456447@netcraft.com>)
for <innovagencyco@imr70-cvps01.hostserv.co.za>; Thu, 24 Oct 2024 00:09:25 +0200
Return-path: <takedown-response+62456447@netcraft.com>
Envelope-to: webmaster@innovagency.co.za
Delivery-date: Thu, 24 Oct 2024 00:09:25 +0200
Received: from spamtitan-filter09.hostserv.co.za ([41.185.250.90]:29876)
by imr70-cvps01.hostserv.co.za with esmtp (Exim 4.98)
(envelope-from <takedown-response+62456447@netcraft.com>)
id 1t3jXh-00000008Tdf-3bxP
for webmaster@innovagency.co.za;
Thu, 24 Oct 2024 00:09:25 +0200
Received: from localhost (localhost [127.0.0.1])
by spamtitan-filter09.hostserv.co.za (Postfix) with ESMTP id D34BD177F55A
for <webmaster@innovagency.co.za>; Thu, 24 Oct 2024 00:09:24 +0200 (SAST)
X-Quarantine-ID: <6Yu7jTuthwz2>
X-Virus-Scanned: by SpamTitan at hostserv.co.za
X-Spam-Flag: NO
X-Spam-Score: 1.709
X-Spam-Level: *
X-Spam-Status: No, score=1.709 tagged_above=-999 required=5
tests=[ANY_BOUNCE_MESSAGE=0.1, BOUNCE_MESSAGE=0.1, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
DNSWL_DWL_MED=-0.2, RCVD_IN_DNSWL_BLOCKED=0.001,
RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_SPFWL=-0.2,
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, ST_KGM_OBFUSCATE_1=0.4, ST_KGM_OBFUSCATE_2=0.8,
ST_LONG_ENVELOPE_FROM=0.906, URIBL_BLOCKED=0.001] autolearn=disabled
Received: from spamtitan-filter09.hostserv.co.za (localhost [127.0.0.1])
by spamtitan-filter09.hostserv.co.za (Postfix) with ESMTP id 7EA2E177F48A
for <webmaster@innovagency.co.za>; Thu, 24 Oct 2024 00:09:20 +0200 (SAST)
Authentication-Results: spamtitan-filter09.hostserv.co.za;
dkim=pass (2048-bit rsa key sha256) header.d=netcraft.com
header.i=@netcraft.com header.b=Z3iRxGUS header.a=rsa-sha256
header.s=default202405-yu9bqteb95aqcfpg x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
policy.policy-from=p header.from=netcraft.com;
spf=pass smtp.mailfrom=takedown-response+62456447@netcraft.com
smtp.helo=mail-1c.netcraft.com
Received-SPF: pass
(netcraft.com: 52.31.138.216 is authorized to use 'takedown-response+62456447@netcraft.com' in 'mfrom' identity (mechanism 'ip4:52.31.138.216' matched))
receiver=spamtitan-filter09.hostserv.co.za;
identity=mailfrom;
envelope-from="takedown-response+62456447@netcraft.com";
helo=mail-1c.netcraft.com;
client-ip=52.31.138.216
Received: from mail-1c.netcraft.com (mail-1c.netcraft.com [52.31.138.216])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by spamtitan-filter09.hostserv.co.za (Postfix) with ESMTPS id C3F87177F542
for <webmaster@innovagency.co.za>; Thu, 24 Oct 2024 00:09:19 +0200 (SAST)
Received: from walleye.netcraft.com (unknown [10.9.0.81])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by mail-1c.netcraft.com (Postfix) with ESMTPS id D601A5DA5
for <webmaster@innovagency.co.za>; Wed, 23 Oct 2024 22:09:17 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail-1c.netcraft.com D601A5DA5
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netcraft.com;
s=default202405-yu9bqteb95aqcfpg; t=1729721357;
bh=idTIV0X7O+nByOcRlyXWy97wXa6F71IBsZVKuzRTsZ0=;
h=Date:From:Subject:To:From;
b=Z3iRxGUS0xpZNJDLjZpVxBHSTPAQMlB7uqROC6WXZ0YxgoXYWoDvTmOaa3IDiulAs
sG9tgjRHGf7yK1TH4G1BPhHmqoaeeMXR1KfAMmeQcH6WLIYPKcwEyqTrwUk5zphGFm
04+XkMRCQcSSJEWdOnwOAN91H0xNBnqZmyDO8apMjfDckwYw+UuxLkDq1iyEjFvodg
BK8iB1bEmCD9fQYz4Sla8XNy9gvkQTsetbIbKtwpmoHh0DFgwyhs2EVAnYuDgEvG0z
AVxqZQCZF4r5s9GW0gfWyiZdWACB1wDoWrgrIQhJ7qbs6ahdFBACUkLgPMebBXuCRr
eO5biawckTW+g==
Received: by walleye.netcraft.com (Postfix, from userid 507)
id CB8EE1179; Wed, 23 Oct 2024 22:09:17 +0000 (UTC)
Content-Transfer-Encoding: 8bit
Content-Type: multipart/report; boundary="_----------=_17297213572613634698"; report-type="feedback-report"
MIME-Version: 1.0
Date: Wed, 23 Oct 2024 22:09:17 +0000
From: Netcraft Takedown Service <takedown-response+62456447@netcraft.com>
Subject: Issue 62456447: Phishing attack at hxxps://isonxp.innovagency.co[.]za/wp-admin/x1/questions.html
To: webmaster@innovagency.co.za
Message-Id: <49fe58758e9826bd65dc4c42ecfa34d0@takedown.netcraft.com>
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
This is a multi-part message in MIME format.
--_----------=_17297213572613634698
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
Hello,
We have discovered a phishing attack on your network.
hxxps://isonxp.innovagency.co[.]za/wp-admin/x1/questions.html [41.185.64.77]
It is possible that this attack is being restricted so it is only visible from certain countries. Before deciding that the attack has been resolved please confirm it cannot be viewed from the following countries:
Australia
You may not have been aware of this attack, however, you are still responsible for removing it.
Please remove this fraudulent content, and any other associated fraudulent content, as soon as possible.
More information about the detected issue is provided at https://incident.netcraft.com/373c101fd6aa/
Kind regards,
Netcraft
Phone: +44(0)1225 447500
Fax: +44(0)1225 448600
Netcraft Issue Number: 62456659
To contact us about updates regarding this attack, please respond to this email. Please note: replies to this address will be logged, but aren't always read. If you believe you have received this email in error, or you require further support, please contact: takedown@netcraft.com.
This mail can be parsed with x-arf tools. Visit http://www.xarf.org/ for more information about x-arf.
--_----------=_17297213572613634698
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: message/feedback-report
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Wed, 23 Oct 2024 22:09:17 +0000
Feedback-Type: xarf
User-Agent: Netcraft
Version: 1
--_----------=_17297213572613634698
Content-Disposition: attachment; filename="xarf.json"
Content-Transfer-Encoding: base64
Content-Type: application/json; charset=utf-8; name="xarf.json"
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Wed, 23 Oct 2024 22:09:17 +0000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--_----------=_17297213572613634698--