JezK

Edit File: 1684471264.M468636P753039.p3plzcpnl476735.prod.phx3.secureserver.net,S=6063,W=6152

Envelope-to: m41c6miumwsp@p3plzcpnl476735.prod.phx3.secureserver.net
Delivery-date: Thu, 18 May 2023 21:41:04 -0700
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@p3plzcpnl476735.prod.phx3.secureserver.net>
To: m41c6miumwsp@p3plzcpnl476735.prod.phx3.secureserver.net
References: <S4jR0Ja2wmCztX8v5t4lafPbOG7TrjIO5VvG68EEHW8@www.maremotofilms.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1684471264-eximdsn-1821690845
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pzrvM-003AR7-DA@p3plzcpnl476735.prod.phx3.secureserver.net>
Date: Thu, 18 May 2023 21:41:04 -0700

--1684471264-eximdsn-1821690845
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

fbruna@patriagrafica.org
    host p3nlsmtpcp-v01.prod.phx3.gdg [132.148.52.4]
    SMTP error from remote mail server after end of data:
    552 5.2.0 zrvMpEvslrKX1 :: CPANEL :: Message rejected for spam or virus content ::
    Please include this entire message when contacting support ::
    v=2.4 cv=cp1d0X0i c=1 sm=1 tr=0 ts=6466fde0 p=2pNji3sjQ-S0I8q5IxUq:22 a=2X41b4ieGfoJAKBLAMfEgQ==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jvepBCNg5xQA:10 a=P0xRbXHiH_UA:10 a=5KLPUuaC_9wA:10 a=D8j2DvN0AAAA:8 a=hLDY8pBaAAAA:8 a=bpsrc5xuAAAA:8 a=ONtnPxkjAAAA:8 a=T63yMXn_AAAA:8 a=cvc7FHJFSlVN7JQC3ewA:9 a=QEXdDO2ut3YA:10 a=pTDE4cYGrqlvi-Sjg15f:22 a=i9sx2ybsOAN5BCWLNXwd:22 a=AssmIKBySoxIz611Cv7g:22 a=H-EekvjJimHCmNANiQ4h:22 a=XWaLFNBTymgWxjIWJ9XC:22 ::
    100.00

--1684471264-eximdsn-1821690845
Content-type: message/delivery-status

Reporting-MTA: dns; p3plzcpnl476735.prod.phx3.secureserver.net

Action: failed
Final-Recipient: rfc822;fbruna@patriagrafica.org
Status: 5.0.0
Remote-MTA: dns; p3nlsmtpcp-v01.prod.phx3.gdg
Diagnostic-Code: smtp; 552 5.2.0 zrvMpEvslrKX1 :: CPANEL :: Message rejected for spam or virus content :: Please include this entire message when contacting support :: v=2.4 cv=cp1d0X0i c=1 sm=1 tr=0 ts=6466fde0 p=2pNji3sjQ-S0I8q5IxUq:22 a=2X41b4ieGfoJAKBLAMfEgQ==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jvepBCNg5xQA:10 a=P0xRbXHiH_UA:10 a=5KLPUuaC_9wA:10 a=D8j2DvN0AAAA:8 a=hLDY8pBaAAAA:8 a=bpsrc5xuAAAA:8 a=ONtnPxkjAAAA:8 a=T63yMXn_AAAA:8 a=cvc7FHJFSlVN7JQC3ewA:9 a=QEXdDO2ut3YA:10 a=pTDE4cYGrqlvi-Sjg15f:22 a=i9sx2ybsOAN5BCWLNXwd:22 a=AssmIKBySoxIz611Cv7g:22 a=H-EekvjJimHCmNANiQ4h:22 a=XWaLFNBTymgWxjIWJ9XC:22 :: 100.00

--1684471264-eximdsn-1821690845
Content-type: message/rfc822

Return-path: <m41c6miumwsp@p3plzcpnl476735.prod.phx3.secureserver.net>
Received: from m41c6miumwsp by p3plzcpnl476735.prod.phx3.secureserver.net with local (Exim 4.95)
	(envelope-from <m41c6miumwsp@p3plzcpnl476735.prod.phx3.secureserver.net>)
	id 1pzrvH-003ACf-Qi
	for fbruna@patriagrafica.org;
	Thu, 18 May 2023 21:41:04 -0700
To: fbruna@patriagrafica.org
Subject: =?UTF-8?Q?Maremoto_Productions_=C2=AB[your-subject]=C2=BB?=
X-PHP-Script: www.maremotofilms.com/index.php for 144.76.80.51
X-PHP-Filename: /home/m41c6miumwsp/public_html/index.php REMOTE_ADDR: 144.76.80.51
Date: Fri, 19 May 2023 04:40:59 +0000
From: Maremoto Productions <wordpress@maremotofilms.com>
Reply-To: hacker@bargemanvorden.nl
Message-ID: <S4jR0Ja2wmCztX8v5t4lafPbOG7TrjIO5VvG68EEHW8@www.maremotofilms.com>
X-Mailer: PHPMailer 6.7 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8

From: Halina Goldstein <hacker@bargemanvorden.nl>
Phone: (03) 6218 3179

Message:
We have hacked your website maremotofilms.com and extracted your databases. This was due to the security holes you had in your your site/server which have gained us remote control of everything that was on the server.

Our team is mostly interested in customer, administrative, and employee information which we have extracted through your databases once we got remote control over the server. It still needs to be sorted out but it will be well-organized once finished. First, we will be going through the emails/sms information and contacting the recipient how you held in disregard about their information being exposed to a hacking group when you could have stopped it. This would be detrimental to your personal image with these relationships with these people. Lastly, now that we have information not only will we be monetizing off it with our methods but made public or sold to other people that will do whatever they wish with the information also after we are done.

Now you can put a stop to this by paying a $3000 fee (0.11 BTC) in bitcoin. You can find our address by visiting https://blockchair.com/bitcoin/address/31o29SdN5c5fpPuy4WvHzkyT37RHUSA36Q where you can copy and paste the address or scan the QR code. We will be notified of payment which we will then delete the information we have obtained, patch the hole in the site/server which we got in and remove you from any future targeting in the future. You have 72 hours in doing so after viewing this message or the series of steps will commence. You can obtain bitcoin through such services such as paxful.com or do a search on bing.com

-- 
Maremoto Productions 
(http://www.maremotofilms.com)

--1684471264-eximdsn-1821690845--