Return-Path: <>
Delivered-To: deltahospital@altar47.supremepanel47.com
Received: from altar47.supremepanel47.com
	by altar47.supremepanel47.com with LMTP
	id ILhAI7W1RGNLIwAAnHgmmA
	(envelope-from <>)
	for <deltahospital@altar47.supremepanel47.com>; Tue, 11 Oct 2022 00:15:49 +0000
Return-path: <>
Envelope-to: deltahospital@altar47.supremepanel47.com
Delivery-date: Tue, 11 Oct 2022 00:15:49 +0000
Received: from mailnull by altar47.supremepanel47.com with local (Exim 4.95)
	id 1oi2w1-00011y-Gl
	for deltahospital@altar47.supremepanel47.com;
	Tue, 11 Oct 2022 00:15:49 +0000
X-Failed-Recipients: deltahospital1987@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@altar47.supremepanel47.com>
To: deltahospital@altar47.supremepanel47.com
References: <OVinyBP1pYUaM6rnh0RoRApRujb0qFHIeGT4OeBaM@delta-hospital.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1665447349-eximdsn-508406804
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1oi2w1-00011y-Gl@altar47.supremepanel47.com>
Date: Tue, 11 Oct 2022 00:15:49 +0000

--1665447349-eximdsn-508406804
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  deltahospital1987@gmail.com
    (ultimately generated from delta@delta-hospital.com)
    host gmail-smtp-in.l.google.com [142.250.27.26]
    SMTP error from remote mail server after end of data:
    550-5.7.25 [170.10.162.208] The IP address sending this message does not have a
    550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
    550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
    550-5.7.25 from IPs with missing PTR records. Please visit
    550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices for more
    550 5.7.25 information. s7-20020a056402036700b0045879feb9fcsi8068228edw.185 - gsmtp

--1665447349-eximdsn-508406804
Content-type: message/delivery-status

Reporting-MTA: dns; altar47.supremepanel47.com

Action: failed
Final-Recipient: rfc822;delta@delta-hospital.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.25 [170.10.162.208] The IP address sending this message does not have a
 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
 550-5.7.25 from IPs with missing PTR records. Please visit
 550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices for more
 550 5.7.25 information. s7-20020a056402036700b0045879feb9fcsi8068228edw.185 - gsmtp

--1665447349-eximdsn-508406804
Content-type: message/rfc822

Return-path: <deltahospital@altar47.supremepanel47.com>
Received: from deltahospital by altar47.supremepanel47.com with local (Exim 4.95)
	(envelope-from <deltahospital@altar47.supremepanel47.com>)
	id 1oi2vz-00010Y-Ic
	for delta@delta-hospital.com;
	Tue, 11 Oct 2022 00:15:47 +0000
To: delta@delta-hospital.com
Subject: =?us-ascii?Q?Delta_Hospital_Ltd._"Your_Site_Has_Been_Comprom?=  =?us-ascii?Q?ised"?=
X-PHP-Script: delta-hospital.com/index.php for 191.96.168.200
X-PHP-Originating-Script: 1158:PHPMailer.php
Date: Tue, 11 Oct 2022 00:15:47 +0000
From: Ken Landsborough <delta@delta-hospital.com>
Reply-To: no-reply@bfreijssen.com
Message-ID: <OVinyBP1pYUaM6rnh0RoRApRujb0qFHIeGT4OeBaM@delta-hospital.com>
X-Mailer: PHPMailer 6.6.0 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

From: Ken Landsborough <no-reply@bfreijssen.com>
Subject: Your Site Has Been Compromised

Message Body:
PLEASE FORWARD THiS EMAiL TO SOMEONE íN YOUR COMPANY WHO iS ALLOWED TO MAKE iMPORTANT DECiSiONS!

We have hacked your website http://delta-hospital.com and extracted your databases.

How díd this happen?

Our team has found a vulnerability withín your síte that we were able to exploit. After finding the vulnerabílity we were able to get your database credentials and extract your entire database and move the ínformatíon to an offshore server.

What does thís mean?

We will systematícally go through a series of steps of totally damagíng your reputatíon. First your database will be leaked or sold to the híghest bídder which they wíll use wíth whatever theír íntentions are. Next íf there are e-mails found they wíll be e-mailed that their informatíon has been sold or leaked and your site http://delta-hospital.com was at fault thusly damaging your reputation and having angry customers/assocíates with whatever angry customers/associates do. Lastly any línks that you have indexed in the search engines wíll be de-indexed based off of blackhat techníques that we used ín the past to de-index our targets.

How do í stop this?

We are willing to refrain from destroyíng your site’s reputation for a small fee. The current fee ís $3000 ín bitcoins (BTC).

Please send the bitcoín to the followíng Bítcoin address (Make sure to copy and paste): 

3M91ZpsTSyhM6kaHWVxY7zJL75rb7dR6y3

 Once you have paíd we wíll automatícally get informed that ít was your payment. Please note that you have to make payment wíthín 5 days after receivíng this e-mail or the database leak, e-maíls dispatched, and de-índex of your síte WíLL start!

How do i get Bitcoíns?

You can easily buy bitcoíns vía several websítes or even offlíne from a Bítcoín-ATM. 

What íf i don’t pay?

if you decide not to pay, we wíll start the attack at the índicated date and uphold ít until you do, there’s no counter measure to this, you wíll only end up wastíng more money trying to fínd a solution. We wíll completely destroy your reputation amongst google and your customers.

This is not a hoax, do not reply to thís email, don’t try to reason or negotíate, we will not read any replies. Once you have paíd we will stop what we were doíng and you wíll never hear from us agaín!

Please note that Bítcoín ís anonymous and no one will find out that you have complíed.

-- 
This e-mail was sent from a contact form on Delta Hospital Ltd. (http://localhost:8012/delta-hospital)


--1665447349-eximdsn-508406804--