HEX
Server: LiteSpeed
System: Linux premium12.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User: desetmhw (842)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: //home/desetmhw/mail/new/1752765182.M379610P2873759.premium12.web-hosting.com,S=6048,W=6160
Return-Path: <>
Delivered-To: desetmhw@premium12.web-hosting.com
Received: from premium12.web-hosting.com
	by premium12.web-hosting.com with LMTP
	id eBJYE/4SeWif2SsAcMox/g
	(envelope-from <>)
	for <desetmhw@premium12.web-hosting.com>; Thu, 17 Jul 2025 11:13:02 -0400
Return-path: <>
Envelope-to: desetmhw@premium12.web-hosting.com
Delivery-date: Thu, 17 Jul 2025 11:13:02 -0400
Received: from mailnull by premium12.web-hosting.com with local (Exim 4.98.2)
	id 1ucQIA-0000000CDRa-156m
	for desetmhw@premium12.web-hosting.com;
	Thu, 17 Jul 2025 11:13:02 -0400
X-Failed-Recipients: info@starbatteryreplacementservice.site
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@premium12.web-hosting.com>
To: desetmhw@premium12.web-hosting.com
References: <jPIdEAlXSFGFbxIcO2bYQHvHPlF4UcPottFKAjWpg@starbatteryreplacementservice.site>
Content-Type: multipart/report; report-type=delivery-status; boundary=1752765182-eximdsn-1915988503
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1ucQIA-0000000CDRa-156m@premium12.web-hosting.com>
Date: Thu, 17 Jul 2025 11:13:02 -0400

--1752765182-eximdsn-1915988503
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  info@starbatteryreplacementservice.site
    host mx1-hosting.jellyfish.systems [162.255.118.28]
    SMTP error from remote mail server after RCPT TO:<info@starbatteryreplacementservice.site>:
    554 5.1.1 <info@starbatteryreplacementservice.site>:
    Recipient address rejected: undeliverable address:
    Mailbox might be disabled, full, or may not exist on the server. Reason:
    JFE030050

--1752765182-eximdsn-1915988503
Content-type: message/delivery-status

Reporting-MTA: dns; premium12.web-hosting.com

Action: failed
Final-Recipient: rfc822;info@starbatteryreplacementservice.site
Status: 5.0.0
Remote-MTA: dns; mx1-hosting.jellyfish.systems
Diagnostic-Code: smtp; 554 5.1.1 <info@starbatteryreplacementservice.site>: Recipient address rejected: undeliverable address: Mailbox might be disabled, full, or may not exist on the server. Reason: JFE030050

--1752765182-eximdsn-1915988503
Content-type: message/rfc822

Return-path: <desetmhw@premium12.web-hosting.com>
Received: from desetmhw by premium12.web-hosting.com with local (Exim 4.98.2)
	(envelope-from <desetmhw@premium12.web-hosting.com>)
	id 1ucQI2-0000000CDDC-1qL1
	for info@starbatteryreplacementservice.site;
	Thu, 17 Jul 2025 11:12:54 -0400
To: info@starbatteryreplacementservice.site
Subject: New message from &quot;My Blog&quot;
Date: Thu, 17 Jul 2025 15:12:54 +0000
From: star battery  replacement services <email@starbatteryreplacementservice.site>
Message-ID: <jPIdEAlXSFGFbxIcO2bYQHvHPlF4UcPottFKAjWpg@starbatteryreplacementservice.site>
X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Sender:  <desetmhw@premium12.web-hosting.com>

Name: Hayden Kimbell<br>Email: hacked@starbatteryreplacementservice.site<br=
>Message: We have hacked your website https://starbatteryreplacementservice=
.site and extracted your databases.<br /><br />How did this happen?<br /><b=
r />Our team has found a vulnerability within your site that we were able t=
o exploit. After finding the vulnerability we were able to get your databas=
e credentials and extract your entire database and move the information to =
an offshore server.<br /><br />What does this mean?<br /><br />We will syst=
ematically go through a series of steps of totally damaging your reputation=
. First your database will be leaked or sold to the highest bidder which th=
ey will use with whatever their intentions are. Next if there are e-mails f=
ound they will be e-mailed that their information has been sold or leaked a=
nd your site https://starbatteryreplacementservice.site was at fault thusly=
 damaging your reputation and having angry customers/associates with whatev=
er angry customers/associates do. Lastly any links that you have indexed in=
 the search engines will be de-indexed based off of blackhat techniques tha=
t we used in the past to de-index Our targets.<br /><br />How do i stop thi=
s?<br /><br />We are willing to refrain from destroying your site's reputat=
ion for a small fee. The current fee is $5000 in bitcoins (0.043 BTC).<br /=
><br />Send the bitcoin to the following Bitcoin address (Make sure to copy=
 and paste):<br /><br /> bc1qel7v90m26e98a2mlgka5t2087wxk733ssv6u7h <br /><=
br />Once you have paid we will automatically get informed that it was your=
 payment. Please note that you have to make payment within 5 days after rec=
eiving this e-mail or the database leak, e-mails dispatched, and de-index o=
f your site WiLL start!<br /><br />How do i get Bitcoins?<br /><br />You ca=
n easily buy bitcoins via several websites or even offline from a Bitcoin-A=
TM.<br /><br />What if i don't pay?<br /><br />We will start the attack at =
the indicated date and uphold it until you do, there's no counter measure t=
o this, you will Only end up wasting more money trying to find a solution. =
We will completely destroy your reputation amongst google and your customer=
s.<br /><br />This is not a hoax, do not reply to this email, don't try to =
reason or negotiate, we will not read any replies. Once you have paid we wi=
ll stop what we were doing and you will never hear from us again!<br /><br =
/>Please note that Bitcoin is anonymous and no one will find out that you h=
ave complied.<br><br>---<br><br>Date: July 17, 2025<br>Time: 3:12 pm<br>Pag=
e URL: https://starbatteryreplacementservice.site/contact-us/<br>User Agent=
: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ch=
rome/114.0.0.0 Safari/537.36<br>Remote IP: 194.110.150.186<br>Powered by: E=
lementor<br>

--1752765182-eximdsn-1915988503--