|
X-He-Spam-Score: -2.1
|
|
Return-Path: <drp-response@group-ib.com>
|
|
Delivered-To: dropbox@plan.io
|
|
Received: from m.launch.gmbh ([127.0.0.1])
|
|
by m.launch.gmbh with LMTP id SNugEwSJmWNGIAAAJzdhvw
|
|
for <dropbox@plan.io>; Wed, 14 Dec 2022 09:27:48 +0100
|
|
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on m.launch.gmbh
|
|
X-Spam-Level:
|
|
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
|
|
DKIM_VALID,DKIM_VALID_AU,DMARC_PASS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,
|
|
RCVD_IN_MSPIKE_H2,SPF_FAIL,SPF_FAIL_IGNORE,SPF_HELO_NONE autolearn=ham
|
|
autolearn_force=no version=3.4.2
|
|
X-Spam-Report:
|
|
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
|
|
* https://www.dnswl.org/, no trust
|
|
* [64.90.62.163 listed in list.dnswl.org]
|
|
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
|
|
* [score: 0.0000]
|
|
* 5.0 SPF_FAIL SPF check failed
|
|
* -0.1 DMARC_PASS DMARC check passed
|
|
* -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
|
|
* [64.90.62.163 listed in wl.mailspike.net]
|
|
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
|
|
* 0.0 HTML_MESSAGE BODY: HTML included in message
|
|
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
|
|
* valid
|
|
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
|
|
* author's domain
|
|
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
|
|
* -5.0 SPF_FAIL_IGNORE Planio Inbox does not consider SPF FAILS on
|
|
* redirects
|
|
X-Spam-Score: -2.1
|
|
Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io
|
|
Authentication-Results: m.launch.gmbh; dmarc=pass (p=reject dis=none) header.from=group-ib.com
|
|
Authentication-Results: m.launch.gmbh; spf=fail smtp.mailfrom=drp-response@group-ib.com
|
|
Authentication-Results: m.launch.gmbh;
|
|
dkim=pass (2048-bit key; unprotected) header.d=group-ib.com header.i=@group-ib.com header.b="lDO4AcL0";
|
|
dkim-atps=neutral
|
|
Received: from pdx1-sub0-mail-mx204.dreamhost.com (mx1.dreamhost.com [64.90.62.163])
|
|
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
|
|
(No client certificate requested)
|
|
by m.launch.gmbh (Postfix) with ESMTPS id B342C83EC0
|
|
for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Wed, 14 Dec 2022 09:27:46 +0100 (CET)
|
|
Received: from postfix-inbound-v2-1.inbound.mailchannels.net (inbound-egress-2.mailchannels.net [35.161.220.134])
|
|
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
|
|
(No client certificate requested)
|
|
by pdx1-sub0-mail-mx204.dreamhost.com (Postfix) with ESMTPS id 4NX7lg6pPkz2TdF
|
|
for <lapor@turnbackhoax.id>; Wed, 14 Dec 2022 00:27:43 -0800 (PST)
|
|
Received: from inbound-trex-3 (unknown [127.0.0.6])
|
|
by postfix-inbound-v2-1.inbound.mailchannels.net (Postfix) with ESMTP id CBB3BC006E
|
|
for <lapor@turnbackhoax.id>; Wed, 14 Dec 2022 08:27:43 +0000 (UTC)
|
|
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1671006462; a=rsa-sha256;
|
|
cv=none;
|
|
b=fxqCdbcIXcu3QheGgd3f4vrWbRK+0ir0ayISYOGmuFoxRdOlobJ0oTquMEoHQrdkqPsHlT
|
|
Dp59bMYqhfWLCYv6r48bTdtprc/D4AfFZM1f+xlPlY3JLyiVPp2NXRwPLjrJZ4QidUyQk8
|
|
YIdqRG0f6K6sofBjZu0la4CUy00jyCZLAJZfq+CT6DbqY3GpyfEE5XGY0qufICC19GD8Eg
|
|
J2VtpgaohSby0ktsY3rvTDl2w0kmOp/NtXZfZivPxL4tIGb3qu4mKKZWm4fbJLSDbcv/Uo
|
|
U1SmeWDFU+HTdP5+/KhD++8PLnHzUOL8zn+BW2KXWoxCvi69OWcgEKIDVnXBKA==
|
|
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
|
|
d=mailchannels.net;
|
|
s=arc-2022; t=1671006462;
|
|
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
|
|
to:to:cc:mime-version:mime-version:content-type:content-type:
|
|
in-reply-to:in-reply-to:references:references:dkim-signature;
|
|
bh=mqWTcq3cG6eAkLAsAlC3ilqWgdXP3Lb2bfZnGCaCi2o=;
|
|
b=DeQXyry/DpVpmumV7Wfm7LOj1ICc25vqc0OJ9m9QLbm7EanU1P8Ud4s+VJR/vtMBUu8FuD
|
|
+EQXoD/sy1kEtXGDKEixKNFN2DpCyJRBdKwoBNpLdPbTt4c/PTv0fGUWuL94aXQz76L1oY
|
|
pjDM2FndYCNuiL74r8gV34fGoF95a6bbIWWFKl3vi6FWSIu/XQ5GbWh6yUYjPSub/LAcHq
|
|
zYjtZkKRqiNYmPvGkHdPaCL9cS5YJsJc5gfncxQBl7jAEyMcPiFRnxR9RAf3YFNyh9dCEw
|
|
fQFSPJfkgvavvqBC62AzfiYNbpuB6JNssX1pt+rnhmmVOTy5PlYp8jlxp5BunA==
|
|
ARC-Authentication-Results: i=1;
|
|
inbound-rspamd-79d585dcd8-vbjbd;
|
|
none
|
|
X-Message-ID: GbMKy2NaTTrw2jlg1v8pZIqH
|
|
Received: from mail-pj1-f51.google.com (mail-pj1-f51.google.com
|
|
[209.85.216.51])
|
|
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256)
|
|
by 100.115.238.37 (trex/6.7.1);
|
|
Wed, 14 Dec 2022 08:27:43 +0000
|
|
Authentication-Results: inbound.mailchannels.net;
|
|
spf=pass smtp.mailfrom=drp-response@group-ib.com;
|
|
dkim=pass header.d=group-ib.com;
|
|
dmarc=pass (policy=reject; pct=100; status=pass);
|
|
arc=none
|
|
Received-SPF: pass (dmarc-service-578b48646f-p9lvw: domain of group-ib.com
|
|
designates 209.85.216.51 as permitted sender) client-ip=209.85.216.51;
|
|
envelope-from=drp-response@group-ib.com; helo=mail-pj1-f51.google.com;
|
|
Received: by mail-pj1-f51.google.com with SMTP id z8-20020a17090abd8800b00219ed30ce47so6364466pjr.3
|
|
for <lapor@turnbackhoax.id>; Wed, 14 Dec 2022 00:27:42 -0800 (PST)
|
|
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
|
|
d=group-ib.com; s=google;
|
|
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
|
|
:from:to:cc:subject:date:message-id:reply-to;
|
|
bh=mUYGU59P+zQOiPRmkRAOLIJYedUhAa1oNUUczsdX2u8=;
|
|
b=lDO4AcL06qQd5ky7Gc+VcNvoPUlHRALKaY/h88x3kd3a3TrxfVpLUTACqcsNd/z3QP
|
|
uUFk0fhV+YCWF2VoTV04DucgXlUW/cKFWHMQT+RLU6fBrBQWuLuj6du2k6VNFSG1DpJJ
|
|
fm+DiUZ3lLRi+ASpkG5f6MNMXWOxFy/S4nEmFsm7rOn01Zp+2u4skHhTAxn5OJiNQTHa
|
|
33fyo6nKerb7ZVB0TgENzxYCnWjhSwzCn4eKhKF8T826S7b3+hYllUeA6BvMLk1f+Byi
|
|
YQC7oxgoeUoYuX2J4WCSPvL42WYZ7OyyVqSlG13ei0RE/SBxeWaTT1tNLJfl+XwZ77ix
|
|
CpEQ==
|
|
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
|
|
d=1e100.net; s=20210112;
|
|
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
|
|
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
|
|
bh=mUYGU59P+zQOiPRmkRAOLIJYedUhAa1oNUUczsdX2u8=;
|
|
b=tqjaWhdGwDQeR90kHuNpCm8DCCU43fRRwXAVB1V3Hs+s2Fq23nUbWYOyXBn3Js3CJZ
|
|
173hu70aT26hXq5IliJbtfP7zY0sH9WPiW3UQuTfjezhie6r0VhD0+i+8flJTRNjS9PY
|
|
Vx85j+PXrLYoc+P5yFXJ2f/FT9g/RrieVZkIp4Bwjbg6NqvlJx3qd1/4K+rAQ5KFx2wN
|
|
6G2WhTb6ucDUzz4EvPce5eg+7DfadU6XvRhItyTBxjwDVcER/TZjYCPUxhnvZB3d0EcO
|
|
zqLnOWb5v9IGbRgssOuezZmCHPjQ/jBuGg47itU5JibwC+DUt0BPqpezImxnyQ1O24gr
|
|
tI1Q==
|
|
X-Gm-Message-State: ANoB5pmKM62swu23r1LAd4y/BlHtpKbsP02xgJsPjlau6DzONRzb6159
|
|
Xt5N1cv+jiw+edKdZ4mruZBgGQkT9CY+SA/Vej2fuFnxOThusFju3V2hjQ==
|
|
X-Google-Smtp-Source: AA0mqf7of1X+6JC3D+DO458icqPBNEwQ/80NzcfcUda1xgNWaAWnG7Nc9huu0VEF1l9uT1J+qg2uo0Tqbko/zrxrTjw=
|
|
X-Received: by 2002:a17:902:9004:b0:17c:9a37:72fb with SMTP id
|
|
a4-20020a170902900400b0017c9a3772fbmr91055841plp.82.1671006461279; Wed, 14
|
|
Dec 2022 00:27:41 -0800 (PST)
|
|
MIME-Version: 1.0
|
|
References: <CANYOneBmXPE0aBch5-ypFoKD7vAhTev3e81Lyz5Hfa2kNngyyw@mail.gmail.com>
|
|
In-Reply-To: <CANYOneBmXPE0aBch5-ypFoKD7vAhTev3e81Lyz5Hfa2kNngyyw@mail.gmail.com>
|
|
From: Group-IB Digital Risk Protection <drp-response@group-ib.com>
|
|
Date: Wed, 14 Dec 2022 15:27:06 +0700
|
|
Message-ID: <CANYOneDyy3gXVyJMbpsE9W1ibyQrHgK1Fq0SOHvmEsk5DQwvTA@mail.gmail.com>
|
|
Subject: Re: Permohonan take down article
|
|
To: lapor@turnbackhoax.id
|
|
Content-Type: multipart/alternative; boundary="0000000000008ad43605efc582e5"
|
|
|
|
--0000000000008ad43605efc582e5
|
|
Content-Type: text/plain; charset="UTF-8"
|
|
|
|
Yth. Bapak/Ibu
|
|
di tempat,
|
|
|
|
Selamat sore,
|
|
|
|
Kami ingin mengetahui kelanjutan dari aduan ini. Mohon untuk menghapus
|
|
artikel dari website segera.
|
|
|
|
Terima kasih.
|
|
|
|
|
|
On Tue, Nov 8, 2022 at 12:03 PM Group-IB Digital Risk Protection <
|
|
drp-response@group-ib.com> wrote:
|
|
|
|
> Yth FAFHH
|
|
>
|
|
> di tempat.
|
|
>
|
|
> Selamat siang,
|
|
>
|
|
> Group-IB Digital Risk Protection menemukan situs berikut ini:
|
|
>
|
|
>
|
|
> hXXps://turnbackhoax[.]id/2022/09/12/salah-perubahan-tarif-transfer-bank-bri-jadi-rp150-000/
|
|
>
|
|
> PT Bank Rakyat Indonesia (Persero) tidak memberikan otorisasi kepada situs
|
|
> anda untuk menggunakan merek dagang "BRI".
|
|
>
|
|
> Group-IB Digital Risk Protection adalah perwakilan resmi PT Bank Rakyat
|
|
> Indonesia (Persero), surat kuasa yang menunjukkan kami sebagai entitas yang
|
|
> sah dapat dilihat pada lampiran
|
|
>
|
|
> Kami meminta bantuan anda untuk menurunkan artikel tersebut dari halaman
|
|
> situs anda.
|
|
>
|
|
> Terima kasih atas kerjasamanya.
|
|
>
|
|
> Salam,
|
|
>
|
|
> Best regards,
|
|
> Group-IB Digital Risk Protection
|
|
> Phone: +65 3159-3798
|
|
> E-Mail: drp-response@group-ib.com
|
|
> Web: Group-IB <https://www.group-ib.com/products/digital-risk-protection/>
|
|
>
|
|
|
|
|
|
--
|
|
Best regards,
|
|
Group-IB Digital Risk Protection
|
|
Phone: +65 3159-3798
|
|
E-Mail: drp-response@group-ib.com
|
|
Web: Group-IB <https://www.group-ib.com/products/digital-risk-protection/>
|
|
|
|
--0000000000008ad43605efc582e5
|
|
Content-Type: text/html; charset="UTF-8"
|
|
Content-Transfer-Encoding: quoted-printable
|
|
|
|
<div dir=3D"ltr"><div dir=3D"ltr">Yth. Bapak/Ibu<div>di tempat,</div><div><=
|
|
br></div><div>Selamat sore,</div><div><br></div><div>Kami ingin mengetahui =
|
|
kelanjutan dari aduan ini. Mohon untuk menghapus artikel dari website seger=
|
|
a.</div><div><br></div><div>Terima kasih.</div></div><div class=3D"gmail-yj=
|
|
6qo gmail-ajU" style=3D"outline:none;padding:10px 0px;width:22px;margin:2px=
|
|
0px 0px"><br class=3D"gmail-Apple-interchange-newline"></div></div><br><di=
|
|
v class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Nov 8=
|
|
, 2022 at 12:03 PM Group-IB Digital Risk Protection <<a href=3D"mailto:d=
|
|
rp-response@group-ib.com">drp-response@group-ib.com</a>> wrote:<br></div=
|
|
><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border=
|
|
-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">Yth FAF=
|
|
HH<br><br>di tempat.<br><br>Selamat siang,<br><br>Group-IB Digital Risk Pro=
|
|
tection menemukan situs berikut ini:<br><br>hXXps://turnbackhoax[.]id/2022/=
|
|
09/12/salah-perubahan-tarif-transfer-bank-bri-jadi-rp150-000/<br><br>PT Ban=
|
|
k Rakyat Indonesia (Persero) tidak memberikan otorisasi kepada situs anda u=
|
|
ntuk menggunakan merek dagang "BRI".<br><br>Group-IB Digital Risk=
|
|
Protection adalah perwakilan resmi PT Bank Rakyat Indonesia (Persero), sur=
|
|
at kuasa yang menunjukkan kami sebagai entitas yang sah dapat dilihat pada =
|
|
lampiran<br><br>Kami meminta bantuan anda untuk menurunkan artikel tersebut=
|
|
dari halaman situs anda.<br><br>Terima kasih atas kerjasamanya.<br><br>Sal=
|
|
am,<br clear=3D"all"><div><br></div><div dir=3D"ltr"><div dir=3D"ltr"><div =
|
|
style=3D"color:rgb(34,34,34)">Best regards,</div><div style=3D"color:rgb(34=
|
|
,34,34)">Group-IB Digital Risk Protection</div><div style=3D"color:rgb(34,3=
|
|
4,34)">Phone:=C2=A0+65 3159-3798</div><div style=3D"color:rgb(34,34,34)">E-=
|
|
Mail:=C2=A0<a href=3D"mailto:drp-response@group-ib.com" target=3D"_blank">d=
|
|
rp-response@group-ib.com</a></div><div style=3D"color:rgb(34,34,34)">Web:=
|
|
=C2=A0<a href=3D"https://www.group-ib.com/products/digital-risk-protection/=
|
|
" target=3D"_blank">Group-IB</a></div></div></div></div>
|
|
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
|
|
class=3D"gmail_signature"><div dir=3D"ltr"><div style=3D"color:rgb(34,34,3=
|
|
4)">Best regards,</div><div style=3D"color:rgb(34,34,34)">Group-IB Digital =
|
|
Risk Protection</div><div style=3D"color:rgb(34,34,34)">Phone:=C2=A0+65 315=
|
|
9-3798</div><div style=3D"color:rgb(34,34,34)">E-Mail:=C2=A0<a href=3D"mail=
|
|
to:drp-response@group-ib.com" target=3D"_blank">drp-response@group-ib.com</=
|
|
a></div><div style=3D"color:rgb(34,34,34)">Web:=C2=A0<a href=3D"https://www=
|
|
.group-ib.com/products/digital-risk-protection/" target=3D"_blank">Group-IB=
|
|
</a></div></div></div>
|
|
|
|
--0000000000008ad43605efc582e5--
|