文件操作 - 1769787877.M237857P1097556.server.jjexpress.com.my,S=8821,W=8993:2,a

文件: /home/jjexpress/mail/cur/1769787877.M237857P1097556.server.jjexpress.com.my,S=8821,W=8993:2,a

编辑文件内容

Envelope-to: webmaster@jjexpress.la
Delivery-date: Fri, 30 Jan 2026 23:44:37 +0800
Content-Transfer-Encoding: 8bit
Content-Type: multipart/report; boundary="_----------=_17697878681227410881"; report-type="feedback-report"
MIME-Version: 1.0
Date: Fri, 30 Jan 2026 15:44:28 +0000
From: Netcraft Takedown Service <takedown-response+80604326@netcraft.com>
Subject: Re: Issue 80604326: Phishing attack at hxxps://jjexpress[.]la/view
References: <fa86d453afd4ee3124e0bed662f3e990@takedown.netcraft.com>
In-Reply-To: <fa86d453afd4ee3124e0bed662f3e990@takedown.netcraft.com>
To: webmaster@jjexpress.la
Message-Id: <deb3538c7d0f5f188f41f2af0368153a@takedown.netcraft.com>
    
 Content analysis details:   (-0.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [52.31.138.216 listed in list.dnswl.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: netcraft.com]
                             [URI: xarf.org]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [52.31.138.216 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.31.138.216 listed in sa-accredit.habeas.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.31.138.216 listed in bl.score.senderscore.com]
X-Spam-Flag: NO

This is a multi-part message in MIME format.

--_----------=_17697878681227410881
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"

Hello,

We have discovered a phishing attack on your network.

hxxp://jjexpress[.]la/view/ [110.4.40.180]
hxxps://jjexpress[.]la/view [110.4.40.180]

We previously contacted you about this issue on 2026-01-07 19:50:50 (UTC).
Since our last notification, the following additional URL(s) have been detected:

hxxp://jjexpress[.]la/view/

You may not have been aware of this attack, however, you are still responsible for removing it.

This attack targets our customer, Adobe, website URL https://www.adobe.com/.

Please remove this fraudulent content, and any other associated fraudulent content, as soon as possible.

Additionally, please keep the fraudulent content safe so that our customer and law enforcement agencies can investigate this incident further once the site is offline.

More information about the detected issue is provided at https://incident.netcraft.com/reports/ttsliv732ugczqqalk5wxz
See https://incident.netcraft.com/about for more details including API support.

Kind regards,

Netcraft

Phone: +44(0)1225 447500
Fax: +44(0)1225 448600
Netcraft Issue Number: 80604326

To contact us about updates regarding this attack, please respond to this email. Please note: replies to this address will be logged, but aren't always read. If you believe you have received this email in error, or you require further support, please contact: support@netcraft.com.

This mail can be parsed with x-arf tools. Visit http://www.xarf.org/ for more information about x-arf.
--_----------=_17697878681227410881
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: message/feedback-report
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Fri, 30 Jan 2026 15:44:28 +0000

Feedback-Type: xarf
User-Agent: Netcraft
Version: 1
--_----------=_17697878681227410881
Content-Disposition: attachment; filename="xarf.json"
Content-Transfer-Encoding: base64
Content-Type: application/json; charset=utf-8; name="xarf.json"
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.030 (F2.85; T2.17; A2.20; B3.15; Q3.13)
Date: Fri, 30 Jan 2026 15:44:28 +0000
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--_----------=_17697878681227410881--

文件操作 - 1769787877.M237857P1097556.server.jjexpress.com.my,S=8821,W=8993:2,a

文件: /home/jjexpress/mail/cur/1769787877.M237857P1097556.server.jjexpress.com.my,S=8821,W=8993:2,a

编辑文件内容

修改文件时间

删除文件