Return-Path: <>
Delivered-To: oxcchem@gator4246.hostgator.com
Received: from gator4246.hostgator.com
	by gator4246.hostgator.com with LMTP
	id UHF4Eer702N7OwUAoM64Pw
	(envelope-from <>)
	for <oxcchem@gator4246.hostgator.com>; Fri, 27 Jan 2023 10:29:30 -0600
Return-path: <>
Envelope-to: oxcchem@gator4246.hostgator.com
Delivery-date: Fri, 27 Jan 2023 10:29:30 -0600
Received: from mailnull by gator4246.hostgator.com with local (Exim 4.95)
	id 1pLRbW-0021Zh-7X
	for oxcchem@gator4246.hostgator.com;
	Fri, 27 Jan 2023 10:29:30 -0600
X-Failed-Recipients: info@sauber.com.ph
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@gator4246.hostgator.com>
To: oxcchem@gator4246.hostgator.com
References: <agtI6k4FekMDxMobTeXmQ6JdHfrg5uBFDUGvRGfN77o@sauber.com.ph>
Content-Type: multipart/report; report-type=delivery-status; boundary=1674836970-eximdsn-701753886
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pLRbW-0021Zh-7X@gator4246.hostgator.com>
Date: Fri, 27 Jan 2023 10:29:30 -0600

--1674836970-eximdsn-701753886
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  info@sauber.com.ph
    No Such User Here

--1674836970-eximdsn-701753886
Content-type: message/delivery-status

Reporting-MTA: dns; gator4246.hostgator.com

Action: failed
Final-Recipient: rfc822;info@sauber.com.ph
Status: 5.0.0

--1674836970-eximdsn-701753886
Content-type: message/rfc822

Return-path: <oxcchem@gator4246.hostgator.com>
Received: from oxcchem by gator4246.hostgator.com with local (Exim 4.95)
	(envelope-from <oxcchem@gator4246.hostgator.com>)
	id 1pLRbW-0021ZQ-3e
	for info@sauber.com.ph;
	Fri, 27 Jan 2023 10:29:30 -0600
To: info@sauber.com.ph
Subject: New message from ""
X-PHP-Script: sauber.com.ph/wp-admin/admin-ajax.php for 45.88.97.240
X-PHP-Originating-Script: 1407:PHPMailer.php
Date: Fri, 27 Jan 2023 16:29:30 +0000
From: "Sauber Professionals, Inc." <info@sauber.com.ph>
Message-ID: <agtI6k4FekMDxMobTeXmQ6JdHfrg5uBFDUGvRGfN77o@sauber.com.ph>
X-Mailer: PHPMailer 6.6.5 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Your Site Has Been Hacked<br>Evelyn Weingarth<br>559-257-1932<br>hacker@cin=
ecostasanjuan.com<br>Hack Inc<br>Your Site Has Been Hacked<br /><br />PLEAS=
E FORWARD THIS EMAIL TO SOMEONE IN YOUR COMPANY WHO IS ALLOWED TO MAKE IMPO=
RTANT DECISIONS!<br /><br />We have hacked your website https://sauber.com.=
ph and extracted your databases.<br /><br />How did this happen?<br /><br /=
>Our team has found a vulnerability within your site that we were able to e=
xploit. After finding the vulnerability we were able to get your database c=
redentials and extract your entire database and move the information to an =
offshore server.<br /><br />What does this mean?<br /><br />We will systema=
tically go through a series of steps of totally damaging your reputation. F=
irst your database will be leaked or sold to the highest bidder which they =
will use with whatever their intentions are. Next if there are e-mails foun=
d they will be e-mailed that their information has been sold or leaked and =
your https://sauber.com.ph was at fault thusly damaging your reputation and=
 having angry customers/associates with whatever angry customers/associates=
 do. Lastly any links that you have indexed in the search engines will be d=
e-indexed based off of blackhat techniques that we used in the past to de-i=
ndex our targets.<br /><br />How do I stop this?<br /><br />We are willing =
to refrain from destroying your site=E2=80=99s reputation for a small fee. =
The current fee is $3000 in bitcoins (0.14 BTC).<br /><br />The amount(appr=
oximately): $3000 (0.14 BTC)<br />The Address Part 1: bc1qe4xvhksgapl3p76mm=
<br />The Address Part 2: fz7thdnmkeuxry08kjhcn<br /><br />So, you have to =
manually copy + paste Part1 and Part2 in one string made of 42 characters w=
ith no space between the parts that start with "b" and end with "n" is the =
actually address where you should send the money to.<br /><br /> Once you h=
ave paid we will automatically get informed that it was your payment. Pleas=
e note that you have to make payment within 72 hours after receiving this m=
essage or the database leak, e-mails dispatched, and de-index of your site =
WILL start!<br /><br />How do I get Bitcoins?<br /><br />You can easily buy=
 bitcoins via several websites or even offline from a Bitcoin-ATM. <br /><b=
r />What if I don=E2=80=99t pay?<br /><br />If you decide not to pay, we wi=
ll start the attack at the indicated date and uphold it until you do, there=
=E2=80=99s no counter measure to this, you will only end up wasting more mo=
ney trying to find a solution. We will completely destroy your reputation a=
mongst google and your customers.<br /><br />This is not a hoax, do not rep=
ly to this email, don=E2=80=99t try to reason or negotiate, we will not rea=
d any replies. Once you have paid we will stop what we were doing and you w=
ill never hear from us again!<br /><br />Please note that Bitcoin is anonym=
ous and no one will find out that you have complied.<br><br>---<br><br>Date=
: January 28, 2023<br>Time: 12:29 am<br>Page URL: https://sauber.com.ph/<br=
>User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1=
.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15<br>Remote IP: 45.88.97=
.240<br>Powered by: Elementor<br>

--1674836970-eximdsn-701753886--