HEX
Server: Apache/2.4.41
System: Linux mainweb 5.4.0-182-generic #202-Ubuntu SMP Fri Apr 26 12:29:36 UTC 2024 x86_64
User: nationalmedicaregrp (1119)
PHP: 8.3.7
Disabled: exec,passthru,shell_exec,system,popen,proc_open,pcntl_exec
Upload Files
File: /home/commandorestoration/Maildir/new/1665994735.11085_0.mainweb
Return-Path: <>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: by mail.waterleakmoldrestoration.com (Postfix)
	id DDD4A159142B; Mon, 17 Oct 2022 04:18:54 -0400 (EDT)
Date: Mon, 17 Oct 2022 04:18:54 -0400 (EDT)
From: [email protected] (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: [email protected]
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="D4AD11591420.1665994734/mail.waterleakmoldrestoration.com"
Message-Id: <[email protected]>

This is a MIME-encapsulated message.

--D4AD11591420.1665994734/mail.waterleakmoldrestoration.com
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host mail.waterleakmoldrestoration.com.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<[email protected]>: mail for commandorestoration.com loops back to
    myself

--D4AD11591420.1665994734/mail.waterleakmoldrestoration.com
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; mail.waterleakmoldrestoration.com
X-Postfix-Queue-ID: D4AD11591420
X-Postfix-Sender: rfc822; [email protected]
Arrival-Date: Mon, 17 Oct 2022 04:18:54 -0400 (EDT)

Final-Recipient: rfc822; [email protected]
Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.4.6
Diagnostic-Code: X-Postfix; mail for commandorestoration.com loops back to
    myself

--D4AD11591420.1665994734/mail.waterleakmoldrestoration.com
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <[email protected]>
Received: by mail.waterleakmoldrestoration.com (Postfix, from userid 1090)
	id D4AD11591420; Mon, 17 Oct 2022 04:18:54 -0400 (EDT)
To: [email protected]
Subject: =?us-ascii?Q?New_message_from_&quot;Commando_Restoration&quo?=  =?us-ascii?Q?t;?=
Date: Mon, 17 Oct 2022 08:18:54 +0000
From: Commando Restoration <[email protected]>
Message-ID: <uF3DLsXBd0IiRXHcBNfcinPT1mOR42HL8zuuY3WHjtA@commandorestoration.com>
X-Mailer: PHPMailer 6.6.0 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Your Name: Eli Macon<br>Email Address: [email protected]<br>Phone Nu=
mber: 06-94680119<br>Your Phone Number: 06-94680119<br>Subject: 06-94680119=
<br>Message: PLEASE F0RWARD THiS EMAiL T0 S0ME0NE iN YoUR C0MPANY WHo iS AL=
L0WED T0 MAKE IMPORTANT DECiSioNS!<br /><br />We have hacked y0ur website h=
ttps://commandorestoration.com and extracted y0ur databases.<br /><br />H0w=
 did this happen?<br /><br />our team has found a vulnerability within y0ur=
 site that we were able to expl0it. After finding the vulnerability we were=
 able t0 get your database credentials and extract y0ur entire database and=
 move the inf0rmati0n t0 an 0ffsh0re server.<br /><br />What d0es this mean=
?<br /><br />We will systematically go through a series of steps of t0tally=
 damaging your reputation. First y0ur database will be leaked 0r sold to th=
e highest bidder which they will use with whatever their intenti0ns are. Ne=
xt if there are e-mails found they will be e-mailed that their inf0rmation =
has been sold 0r leaked and your site https://commandorestoration.com was a=
t fault thusly damaging y0ur reputation and having angry customers/associat=
es with whatever angry customers/ass0ciates do. Lastly any links that you h=
ave indexed in the search engines will be de-indexed based off 0f blackhat =
techniques that we used in the past t0 de-index 0ur targets.<br /><br />How=
 d0 i stop this?<br /><br />We are willing t0 refrain from destr0ying y0ur =
site=E2=80=99s reputation f0r a small fee. The current fee is $3000 in bitc=
oins (.16 BTC).<br /><br />Please send the bitcoin to the f0llowing Bitcoin=
 address (Make sure to copy and paste): <br /><br />3Mr8kHMnycxWy4MwXnx4ora=
5AVDqxzSLhk<br /><br /> 0nce you have paid we will automatically get inform=
ed that it was y0ur payment. Please n0te that y0u have to make payment with=
in 5 days after receiving this e-mail 0r the database leak, e-mails dispatc=
hed, and de-index of y0ur site WiLL start!<br /><br />How d0 i get Bitcoins=
?<br /><br />You can easily buy bitcoins via several websites or even 0ffli=
ne fr0m a Bitcoin-ATM. <br /><br />What if i don=E2=80=99t pay?<br /><br />=
if you decide not t0 pay, we will start the attack at the indicated date an=
d uphold it until y0u d0, there=E2=80=99s no counter measure to this, you w=
ill 0nly end up wasting m0re m0ney trying to find a solution. We will compl=
etely destr0y your reputati0n am0ngst g00gle and y0ur customers.<br /><br /=
>This is n0t a h0ax, do not reply t0 this email, don=E2=80=99t try to reas0=
n or negotiate, we will n0t read any replies. once y0u have paid we will st=
0p what we were doing and y0u will never hear from us again!<br /><br />Ple=
ase note that Bitcoin is an0nym0us and no 0ne will find out that you have c=
omplied.<br><br>---<br><br>Date: October 17, 2022<br>Time: 8:18 am<br>Page =
URL: https://commandorestoration.com/contact/<br>User Agent: Mozilla/5.0 (M=
acintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrom=
e/103.0.0.0 Safari/537.36 Edg/103.0.1264.71<br>Remote IP: 181.214.218.69<br=
>Powered by: Elementor<br>

--D4AD11591420.1665994734/mail.waterleakmoldrestoration.com--