HEX

File: /home/desetmhw/mail/new/1753110422.M557461P755111.premium12.web-hosting.com,S=5474,W=5580
Envelope-to: desetmhw@premium12.web-hosting.com
Delivery-date: Mon, 21 Jul 2025 11:07:02 -0400
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@premium12.web-hosting.com>
To: desetmhw@premium12.web-hosting.com
References: <kwFmSQel5yqlbbXImfx7pkSYriwC2f84z6zG45npg@profamilyvisaservices.site>
Content-Type: multipart/report; report-type=delivery-status; boundary=1753110422-eximdsn-590858375
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uds6Y-00000003E6Q-29Rr@premium12.web-hosting.com>
Date: Mon, 21 Jul 2025 11:07:02 -0400

--1753110422-eximdsn-590858375
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  dilbarkhan7511@gmail.com
    Message discarded as high-probability spam

--1753110422-eximdsn-590858375
Content-type: message/delivery-status

Reporting-MTA: dns; premium12.web-hosting.com

Action: failed
Final-Recipient: rfc822;dilbarkhan7511@gmail.com
Status: 5.0.0

--1753110422-eximdsn-590858375
Content-type: message/rfc822

Return-path: <desetmhw@premium12.web-hosting.com>
Received: from desetmhw by premium12.web-hosting.com with local (Exim 4.98.2)
	(envelope-from <desetmhw@premium12.web-hosting.com>)
	id 1uds6V-00000003E2S-43YC
	for dilbarkhan7511@gmail.com;
	Mon, 21 Jul 2025 11:06:59 -0400
To: dilbarkhan7511@gmail.com
Subject: =?us-ascii?Q?New_message_from_&quot;Pro_Family_Visa_Services?=
 =?us-ascii?Q?&quot;?=
Date: Mon, 21 Jul 2025 15:06:59 +0000
From: Pro Family Visa Services <email@profamilyvisaservices.site>
Message-ID: <kwFmSQel5yqlbbXImfx7pkSYriwC2f84z6zG45npg@profamilyvisaservices.site>
X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Sender:  <desetmhw@premium12.web-hosting.com>

Name: Carlos Vazquez<br>Company: Carlos Vazquez<br>Phone: 3692473452<br>Ema=
il: hacked@profamilyvisaservices.site<br>Subject: Your Site Has Been Hacked=
<br>Message: We have hacked your website https://profamilyvisaservices.site=
 and extracted your databases.<br /><br />How did this happen?<br /><br />O=
ur team has found a vulnerability within your site that we were able to exp=
loit. After finding the vulnerability we were able to get your database cre=
dentials and extract your entire database and move the information to an of=
fshore server.<br /><br />What does this mean?<br /><br />We will systemati=
cally go through a series of steps of totally damaging your reputation. Fir=
st your database will be leaked or sold to the highest bidder which they wi=
ll use with whatever their intentions are. Next if there are e-mails found =
they will be e-mailed that their information has been sold or leaked and yo=
ur site https://profamilyvisaservices.site was at fault thusly damaging you=
r reputation and having angry customers/associates with whatever angry cust=
omers/associates do. Lastly any links that you have indexed in the search e=
ngines will be de-indexed based off of blackhat techniques that we used in =
the past to de-index Our targets.<br /><br />How do i stop this?<br /><br /=
>We are willing to refrain from destroying your site's reputation for a sma=
ll fee. The current fee is $4000 in bitcoins (0.034 BTC).<br /><br />Send t=
he bitcoin to the following Bitcoin address (Make sure to copy and paste):<=
br /><br /> bc1qsds43kee6tgrtnzt9rcyaxdvz3v6sya4sv43pt <br /><br />Once you=
 have paid we will automatically get informed that it was your payment. Ple=
ase note that you have to make payment within 5 days after receiving this e=
-mail or the database leak, e-mails dispatched, and de-index of your site W=
iLL start!<br /><br />How do i get Bitcoins?<br /><br />You can easily buy =
bitcoins via several websites or even offline from a Bitcoin-ATM.<br /><br =
/>What if i don't pay?<br /><br />We will start the attack at the indicated=
 date and uphold it until you do, there's no counter measure to this, you w=
ill Only end up wasting more money trying to find a solution. We will compl=
etely destroy your reputation amongst google and your customers.<br /><br /=
>This is not a hoax, do not reply to this email, don't try to reason or neg=
otiate, we will not read any replies. Once you have paid we will stop what =
we were doing and you will never hear from us again!<br /><br />Please note=
 that Bitcoin is anonymous and no one will find out that you have complied.=
<br><br>---<br><br>Date: July 21, 2025<br>Time: 3:06 pm<br>Page URL: https:=
//profamilyvisaservices.site/contact/<br>User Agent: Mozilla/5.0 (Windows N=
T 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safa=
ri/537.36<br>Remote IP: 192.252.210.237<br>Powered by: Elementor<br>

--1753110422-eximdsn-590858375--