HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/new/1711244791.M29250P1781491.cde2.duelhost.dk,S=5833,W=5942
Return-Path: <>
Delivered-To: dtptviut@morsunivers.dk
Received: from cde2.duelhost.dk
	by cde2.duelhost.dk with LMTP
	id EJyiAfeF/2XzLhsAnRjtMw
	(envelope-from <>)
	for <dtptviut@morsunivers.dk>; Sun, 24 Mar 2024 02:46:31 +0100
Return-path: <>
Envelope-to: dtptviut@morsunivers.dk
Delivery-date: Sun, 24 Mar 2024 02:46:31 +0100
Received: from mail by cde2.duelhost.dk with local (Exim 4.97.1)
	id 1roCwR-00000008UzH-03R1
	for dtptviut@morsunivers.dk;
	Sun, 24 Mar 2024 02:46:31 +0100
X-Failed-Recipients: catchallcreekmedia@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cde2.duelhost.dk>
To: dtptviut@morsunivers.dk
References: <PRRASLl1qwkV2By91aSVnt18Rcac6RH17d4AK19Ybg@morsunivers.dk>
Content-Type: multipart/report; report-type=delivery-status; boundary=1711244791-eximdsn-416879319
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1roCwR-00000008UzH-03R1@cde2.duelhost.dk>
Date: Sun, 24 Mar 2024 02:46:31 +0100

--1711244791-eximdsn-416879319
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  catchallcreekmedia@gmail.com
    (generated from kontakt@morsunivers.dk)
    host smtp.mailchannels.net [44.237.146.173]
    SMTP error from remote mail server after end of data:
    550 5.7.1 [CS] Message blocked. If this is a false positive, please report this to your hosting service provider. See https://console.mailchannels.net/insights/bounce?auid=42lgvtgdxx&sender=dtptviut%40morsunivers.dk&txid=0c533c516aea47f7

--1711244791-eximdsn-416879319
Content-type: message/delivery-status

Reporting-MTA: dns; cde2.duelhost.dk

Action: failed
Final-Recipient: rfc822;kontakt@morsunivers.dk
Status: 5.0.0
Remote-MTA: dns; smtp.mailchannels.net
Diagnostic-Code: smtp; 550 5.7.1 [CS] Message blocked. If this is a false positive, please report this to your hosting service provider. See https://console.mailchannels.net/insights/bounce?auid=42lgvtgdxx&sender=dtptviut%40morsunivers.dk&txid=0c533c516aea47f7

--1711244791-eximdsn-416879319
Content-type: message/rfc822

Return-path: <dtptviut@morsunivers.dk>
Received: from dtptviut by cde2.duelhost.dk with local (Exim 4.97.1)
	(envelope-from <dtptviut@morsunivers.dk>)
	id 1roCwO-00000008Uvl-04WD
	for kontakt@morsunivers.dk;
	Sun, 24 Mar 2024 02:46:28 +0100
To: kontakt@morsunivers.dk
Subject: =?UTF-8?Q?Ny_indg=C3=A5ender_mail_fra_"morsunivers"?=
Date: Sun, 24 Mar 2024 01:46:27 +0000
From: Havekrogen <peter@creekmedia.dk>
Message-ID: <PRRASLl1qwkV2By91aSVnt18Rcac6RH17d4AK19Ybg@morsunivers.dk>
X-Mailer: PHPMailer 6.8.1 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Navn*: Vernell Cuevas<br>E-mail*: hacked@morsunivers.dk<br>Telefon nr: 7948=
11700<br>Emne / overskrift: Your Site Has Been Hacked<br>Din besked: We hav=
e hacked your website https://morsunivers.dk and extracted your databases.<=
br /><br />How did this happen?<br /><br />Our team has found a vulnerabili=
ty within your site that we were able to exploit. After finding the vulnera=
bility we were able to get your database credentials and extract your entir=
e database and move the information to an offshore server.<br /><br />What =
does this mean?<br /><br />We will systematically go through a series of st=
eps of totally damaging your reputation. First your database will be leaked=
 or sold to the highest bidder which they will use with whatever their inte=
ntions are. Next if there are e-mails found they will be e-mailed that thei=
r information has been sold or leaked and your site https://morsunivers.dk =
was at fault thusly damaging your reputation and having angry customers/ass=
ociates with whatever angry customers/associates do. Lastly any links that =
you have indexed in the search engines will be de-indexed based off of blac=
khat techniques that we used in the past to de-index Our targets.<br /><br =
/>How do i stop this?<br /><br />We are willing to refrain from destroying =
your site's reputation for a small fee. The current fee is $3000 in bitcoin=
s (0.044 BTC).<br /><br />Send the bitcoin to the following Bitcoin address=
 (Make sure to copy and paste):<br /><br />3K4cjuUjWo1cjUQHsPTSsA6yU9SJScgt=
C4 <br /><br />Once you have paid we will automatically get informed that i=
t was your payment. Please note that you have to make payment within 5 days=
 after receiving this e-mail or the database leak, e-mails dispatched, and =
de-index of your site WiLL start!<br /><br />How do i get Bitcoins?<br /><b=
r />You can easily buy bitcoins via several websites or even offline from a=
 Bitcoin-ATM.<br /><br />What if i don't pay?<br /><br />We will start the =
attack at the indicated date and uphold it until you do, there's no counter=
 measure to this, you will Only end up wasting more money trying to find a =
solution. We will completely destroy your reputation amongst google and you=
r customers.<br /><br />This is not a hoax, do not reply to this email, don=
't try to reason or negotiate, we will not read any replies. Once you have =
paid we will stop what we were doing and you will never hear from us again!=
<br /><br />Please note that Bitcoin is anonymous and no one will find out =
that you have complied.<br><br>---<br><br>Dato: marts 24, 2024<br>Tidspunkt=
: 2:46 am<br>Side URL: https://morsunivers.dk/kontakt/<br>Bruger agent: Moz=
illa/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like G=
ecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36<br>Fjern-I=
P adresse: 156.146.60.5<br>Drevet af: Elementor<br>

--1711244791-eximdsn-416879319--