文件操作 - 1767704644.M334851P1358127.server.jjexpress.com.my,S=8468,W=8632:2,a
返回文件管理
返回主菜单
删除本文件
文件: /home/jjexpress/mail/cur/1767704644.M334851P1358127.server.jjexpress.com.my,S=8468,W=8632:2,a
编辑文件内容
Return-Path: <takedown-response+80604326@netcraft.com> Delivered-To: jjexpress@server.jjexpress.com.my Received: from server.jjexpress.com.my by server.jjexpress.com.my with LMTP id 5gn3EUQIXWkvuRQAXt0GIA (envelope-from <takedown-response+80604326@netcraft.com>) for <jjexpress@server.jjexpress.com.my>; Tue, 06 Jan 2026 21:04:04 +0800 Return-path: <takedown-response+80604326@netcraft.com> Envelope-to: support@jjexpress.la Delivery-date: Tue, 06 Jan 2026 21:04:04 +0800 Received: from mail-1c.netcraft.com ([52.31.138.216]:54173) by server.jjexpress.com.my with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99) (envelope-from <takedown-response+80604326@netcraft.com>) id 1vd6jA-00000005gvv-0i7Q for support@jjexpress.la; Tue, 06 Jan 2026 21:04:03 +0800 Received: from barb.netcraft.com (unknown [10.9.0.151]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail-1c.netcraft.com (Postfix) with ESMTPS id A0DEA2082 for <support@jjexpress.la>; Tue, 6 Jan 2026 13:03:57 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netcraft.com; s=default202405-yu9bqteb95aqcfpg; t=1767704637; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hRKhgZTHqOWoZ2sIZ0g42YSXIGYEf9P7V8Levccrme4=; b=Y8Rg2Fx2v5zHvBZbLQxEh3KezO33Sof5wuDku+ibpG5by6SNlauZm8OOkio52hBnYYaaC4 1A0K0yRGZha3C5/vvqh+A0/0N0Be/xdFzS/BEWMVfCar8Yzp1hZnc2UvR607g7YLZMrxP1 Zbm7od5Ka3YRoJiZVJtYFA3ArXnFfRBhNg11OvworflAJPa6c2n6nsFm9HcGg4cjx7/ncS wbKaMkHvMnvZqLehBXxO9o8/SefpN4vFXey8bumvBaaOWGlj3dPVbuSqPDAYEg7e3FgOei ejmaZqhz9ApcWBc5yhR8me4QzU7QpiW+m+Qa5w9svg/VPQ7xIlfpJ0YlVD007w== Received: by barb.netcraft.com (Postfix, from userid 507) id 9D29D87F; Tue, 6 Jan 2026 13:03:57 +0000 (UTC) Content-Transfer-Encoding: 8bit Content-Type: multipart/report; boundary="_----------=_1767704637326453754"; report-type="feedback-report" MIME-Version: 1.0 Date: Tue, 6 Jan 2026 13:03:57 +0000 From: Netcraft Takedown Service <takedown-response+80604326@netcraft.com> Subject: Issue 80604326: Phishing attack at hxxps://jjexpress[.]la/view To: support@jjexpress.la Message-Id: <1c7107a08b94574bce063c98d5eed2cd@takedown.netcraft.com> X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13) X-Spam-Status: No, score=4.3 X-Spam-Score: 43 X-Spam-Bar: ++++ X-Ham-Report: Spam detection software, running on the system "server.jjexpress.com.my", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, We have discovered a phishing attack on your network. hxxps://jjexpress[.]la/view [110.4.40.180] Content analysis details: (4.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [52.31.138.216 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: netcraft.com] [URI: xarf.org] 4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4) [52.31.138.216 listed in bl.mailspike.net] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [52.31.138.216 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [52.31.138.216 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [52.31.138.216 listed in bl.score.senderscore.com] X-Spam-Flag: NO This is a multi-part message in MIME format. --_----------=_1767704637326453754 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="UTF-8" Hello, We have discovered a phishing attack on your network. hxxps://jjexpress[.]la/view [110.4.40.180] You may not have been aware of this attack, however, you are still responsible for removing it. This attack targets our customer, Adobe, website URL https://www.adobe.com/. Please remove this fraudulent content, and any other associated fraudulent content, as soon as possible. Additionally, please keep the fraudulent content safe so that our customer and law enforcement agencies can investigate this incident further once the site is offline. More information about the detected issue is provided at https://incident.netcraft.com/reports/ttsliv732ugczqqalk5wxz See https://incident.netcraft.com/about for more details including API support. Kind regards, Netcraft Phone: +44(0)1225 447500 Fax: +44(0)1225 448600 Netcraft Issue Number: 80604326 To contact us about updates regarding this attack, please respond to this email. Please note: replies to this address will be logged, but aren't always read. If you believe you have received this email in error, or you require further support, please contact: support@netcraft.com. This mail can be parsed with x-arf tools. Visit http://www.xarf.org/ for more information about x-arf. --_----------=_1767704637326453754 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: message/feedback-report MIME-Version: 1.0 X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13) Date: Tue, 6 Jan 2026 13:03:57 +0000 Feedback-Type: xarf User-Agent: Netcraft Version: 1 --_----------=_1767704637326453754 Content-Disposition: attachment; filename="xarf.json" Content-Transfer-Encoding: base64 Content-Type: application/json; charset=utf-8; name="xarf.json" MIME-Version: 1.0 X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13) Date: Tue, 6 Jan 2026 13:03:57 +0000 eyJSZXBvcnRlckluZm8iOnsiUmVwb3J0ZXJPcmdFbWFpbCI6InRha2Vkb3duLXJlc3BvbnNlKzgw NjA0MzI2QG5ldGNyYWZ0LmNvbSIsIlJlcG9ydGVyT3JnRG9tYWluIjoibmV0Y3JhZnQuY29tIiwi UmVwb3J0ZXJPcmciOiJOZXRjcmFmdCJ9LCJEaXNjbG9zdXJlIjp0cnVlLCJPbkJlaGFsZk9mIjp7 IkNvbXBsYWluYW50T3JnRW1haWwiOiJ0YWtlZG93bi1yZXNwb25zZSs4MDYwNDMyNkBuZXRjcmFm dC5jb20iLCJDb21wbGFpbmFudE9yZyI6IkFkb2JlIiwiQ29tcGxhaW5hbnRPcmdEb21haW4iOiJ3 d3cuYWRvYmUuY29tIn0sIlZlcnNpb24iOiIxIiwiUmVwb3J0Ijp7IkRhdGUiOiIyMDI2LTAxLTA2 VDEzOjAzOjE4WiIsIlJlcG9ydGVyTm90ZXMiOiJTZWUgaHR0cHM6Ly9pbmNpZGVudC5uZXRjcmFm dC5jb20vcmVwb3J0cy90dHNsaXY3MzJ1Z2N6cXFhbGs1d3h6IGZvciBtb3JlIGluZm9ybWF0aW9u IiwiUmVwb3J0VHlwZSI6IlBoaXNoaW5nIiwiUmVwb3J0Q2xhc3MiOiJDb250ZW50IiwiUmVwb3J0 ZXJDYXNlSUQiOiI4MDYwNDMyNiIsIlNvdXJjZVVybCI6Imh0dHBzOi8vampleHByZXNzLmxhL3Zp ZXciLCJTb3VyY2VJcCI6IjExMC40LjQwLjE4MCJ9fQ== --_----------=_1767704637326453754--
修改文件时间
将文件时间修改为当前时间的前一年
删除文件