Return-Path: <>
Delivered-To: mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net
Received: from n3plcpnl0143.prod.ams3.secureserver.net
	by n3plcpnl0143.prod.ams3.secureserver.net with LMTP
	id gOn8L3klTWN8hRAAT/a0/Q
	(envelope-from <>)
	for <mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net>; Mon, 17 Oct 2022 02:50:49 -0700
Return-path: <>
Envelope-to: mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net
Delivery-date: Mon, 17 Oct 2022 02:50:49 -0700
Received: from mailnull by n3plcpnl0143.prod.ams3.secureserver.net with local (Exim 4.94.2)
	id 1okMll-004fnh-MA
	for mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net; Mon, 17 Oct 2022 02:50:49 -0700
X-Failed-Recipients: essebi.sottofondi@hotmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@n3plcpnl0143.prod.ams3.secureserver.net>
To: mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net
References: <0f9e1519a8ddc09349eb0c46952f6710@essebisottofondi.it>
Content-Type: multipart/report; report-type=delivery-status; boundary=1666000249-eximdsn-200266012
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1okMll-004fnh-MA@n3plcpnl0143.prod.ams3.secureserver.net>
Date: Mon, 17 Oct 2022 02:50:49 -0700

--1666000249-eximdsn-200266012
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  essebi.sottofondi@hotmail.com
    host sxb1nlsmtpcp-v01.prod.sxb1.secureserver.net [92.204.64.10]
    SMTP error from remote mail server after end of data:
    552 5.2.0 kMllorkl5KEPM :: CPANEL :: Message rejected for spam or virus content ::
    Please include this entire message when contacting support ::
    v=2.4 cv=e4jAC4l/ c=1 sm=1 tr=0 ts=634d2579 p=QNRmy_xCIKk87ShWVScA:9 a=Iy8Z3qscOJgaTS4MpTCs/w==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=DWNmvu6Kn7Qv_q8R:21 a=IkcTkHD0fZMA:10 a=XAQIKP4gLaUA:10 a=Qawa6l4ZSaYA:10 a=JCno6oxCovkA:10 a=ZCKPfknIAAAA:8 a=QEXdDO2ut3YA:10 a=DPmNHhNc3fsA:10 a=vp2flIeNcToA:10 a=9vb-wtt_ox0A:10 a=qyetXpyhNEV9hYmfPbiU:22 a=W1hioIOS51GtnxcXbZ4V:22 a=IfSbD5-B830PxvZ7RRTK:22 ::
    100.00

--1666000249-eximdsn-200266012
Content-type: message/delivery-status

Reporting-MTA: dns; n3plcpnl0143.prod.ams3.secureserver.net

Action: failed
Final-Recipient: rfc822;essebi.sottofondi@hotmail.com
Status: 5.0.0
Remote-MTA: dns; sxb1nlsmtpcp-v01.prod.sxb1.secureserver.net
Diagnostic-Code: smtp; 552 5.2.0 kMllorkl5KEPM :: CPANEL :: Message rejected for spam or virus content :: Please include this entire message when contacting support :: v=2.4 cv=e4jAC4l/ c=1 sm=1 tr=0 ts=634d2579 p=QNRmy_xCIKk87ShWVScA:9 a=Iy8Z3qscOJgaTS4MpTCs/w==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=DWNmvu6Kn7Qv_q8R:21 a=IkcTkHD0fZMA:10 a=XAQIKP4gLaUA:10 a=Qawa6l4ZSaYA:10 a=JCno6oxCovkA:10 a=ZCKPfknIAAAA:8 a=QEXdDO2ut3YA:10 a=DPmNHhNc3fsA:10 a=vp2flIeNcToA:10 a=9vb-wtt_ox0A:10 a=qyetXpyhNEV9hYmfPbiU:22 a=W1hioIOS51GtnxcXbZ4V:22 a=IfSbD5-B830PxvZ7RRTK:22 :: 100.00

--1666000249-eximdsn-200266012
Content-type: message/rfc822

Return-path: <mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net>
Received: from mf2lfas89ljs by n3plcpnl0143.prod.ams3.secureserver.net with local (Exim 4.94.2)
	(envelope-from <mf2lfas89ljs@n3plcpnl0143.prod.ams3.secureserver.net>)
	id 1okMlk-004fn4-Uy
	for essebi.sottofondi@hotmail.com; Mon, 17 Oct 2022 02:50:48 -0700
To: essebi.sottofondi@hotmail.com
Subject: Essebisottofondi "This e-mail was sent from a contact form on Essebisottofondi"
X-PHP-Script: essebisottofondi.it/index.php for 181.214.218.69
X-PHP-Filename: /home/mf2lfas89ljs/public_html/index.php REMOTE_ADDR: 181.214.218.69
Date: Mon, 17 Oct 2022 09:50:48 +0000
From: Essebisottofondi <wordpress@wp.bdmonster.com>
Reply-To: no-reply@themployment.work
Message-ID: <0f9e1519a8ddc09349eb0c46952f6710@essebisottofondi.it>
X-Mailer: PHPMailer 5.2.27 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

From: Estela <no-reply@themployment.work>
Subject: This e-mail was sent from a contact form on Essebisottofondi

Message Body:
Name: Estela
Email: no-reply@themployment.work
Comment: PLEASE FoRWARD THiS EMAiL T0 SoMEoNE iN Y0UR C0MPANY WH0 iS ALL0WED To MAKE IMPORTANT DECiSi0NS!

We have hacked y0ur website http://essebisottofondi.it and extracted your databases.

H0w did this happen?

0ur team has found a vulnerability within your site that we were able t0 exploit. After finding the vulnerability we were able to get y0ur database credentials and extract your entire database and m0ve the informati0n t0 an offsh0re server.

What does this mean?

We will systematically g0 thr0ugh a series of steps 0f totally damaging your reputati0n. First your database will be leaked 0r s0ld to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails f0und they will be e-mailed that their inf0rmation has been sold or leaked and your site http://essebisottofondi.it was at fault thusly damaging your reputation and having angry customers/ass0ciates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we used in the past t0 de-index our targets.

How do i stop this?

We are willing to refrain fr0m destroying y0ur site’s reputation f0r a small fee. The current fee is $3000 in bitcoins (.16 BTC).

Please send the bitcoin to the following Bitcoin address (Make sure to copy and paste): 

3KwHRxN3RsHRnTkFmw5thzKT7EJGGSAuMn

 once you have paid we will aut0matically get informed that it was y0ur payment. Please n0te that y0u have t0 make payment within 5 days after receiving this e-mail 0r the database leak, e-mails dispatched, and de-index 0f your site WiLL start!

How d0 i get Bitcoins?

You can easily buy bitcoins via several websites or even 0ffline fr0m a Bitcoin-ATM. 

What if i d0n’t pay?

if you decide not t0 pay, we will start the attack at the indicated date and uph0ld it until you d0, there’s no counter measure t0 this, you will only end up wasting m0re money trying to find a s0lution. We will completely destr0y y0ur reputati0n am0ngst go0gle and y0ur cust0mers.

This is not a h0ax, d0 n0t reply t0 this email, d0n’t try to reason 0r negotiate, we will n0t read any replies. once y0u have paid we will stop what we were d0ing and y0u will never hear from us again!

Please note that Bitcoin is an0nym0us and n0 0ne will find out that you have c0mplied.

-- 
This e-mail was sent from a contact form on Essebisottofondi (http://essebisottofondi.it)


--1666000249-eximdsn-200266012--
