#$@%#$%!

Ngiler SH3LL 360
: / home / likhxapw / mail / new /

Information Server
MySQL : OFF Perl : OFF CURL : ON WGET : OFF PKEXEC : OFF

Directive	Local Value
IP Address	63.250.38.10
System	Linux premium90.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User	likhxapw
PHP Version	8.3.30
Software	LiteSpeed
Doc root	Writable

Edit File : 1753115014.M910196P2993585.premium90.web-hosting.com,S=5265,W=5370 \| Size : 5.14 KB
Return-Path: <> Delivered-To: likhxapw@premium90.web-hosting.com Received: from premium90.web-hosting.com by premium90.web-hosting.com with LMTP id QBFlNYZpfmixrS0A6h8D9g (envelope-from <>) for <likhxapw@premium90.web-hosting.com>; Mon, 21 Jul 2025 12:23:34 -0400 Return-path: <> Envelope-to: likhxapw@premium90.web-hosting.com Delivery-date: Mon, 21 Jul 2025 12:23:34 -0400 Received: from mailnull by premium90.web-hosting.com with local (Exim 4.98.2) id 1udtIc-0000000CbpF-3eV0 for likhxapw@premium90.web-hosting.com; Mon, 21 Jul 2025 12:23:34 -0400 X-Failed-Recipients: admin@artwillbd.com Auto-Submitted: auto-replied From: Mail Delivery System <Mailer-Daemon@premium90.web-hosting.com> To: likhxapw@premium90.web-hosting.com References: <O6bltQMTqQdEBcZP1IhENsr80aGAMMAq7dvtEV0QHM@artwillbd.com> Content-Type: multipart/report; report-type=delivery-status; boundary=1753115014-eximdsn-120620648 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: <E1udtIc-0000000CbpF-3eV0@premium90.web-hosting.com> Date: Mon, 21 Jul 2025 12:23:34 -0400 --1753115014-eximdsn-120620648 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: admin@artwillbd.com No Such User Here --1753115014-eximdsn-120620648 Content-type: message/delivery-status Reporting-MTA: dns; premium90.web-hosting.com Action: failed Final-Recipient: rfc822;admin@artwillbd.com Status: 5.0.0 --1753115014-eximdsn-120620648 Content-type: message/rfc822 Return-path: <likhxapw@premium90.web-hosting.com> Received: from likhxapw by premium90.web-hosting.com with local (Exim 4.98.2) (envelope-from <likhxapw@premium90.web-hosting.com>) id 1udtIc-0000000Cbp2-2ohL for admin@artwillbd.com; Mon, 21 Jul 2025 12:23:34 -0400 To: admin@artwillbd.com Subject: New message from "Artwillbd" Date: Mon, 21 Jul 2025 16:23:34 +0000 From: Artwillbd <email@artwillbd.com> Message-ID: <O6bltQMTqQdEBcZP1IhENsr80aGAMMAq7dvtEV0QHM@artwillbd.com> X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer) MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Sender: <likhxapw@premium90.web-hosting.com> Name: Nikole Rios<br>Email: hacked@artwillbd.com<br>Phone: 3980068585<br>Se= rvices: <br>Design/Sample Image: <br>Message: We have hacked your website h= ttps://artwillbd.com and extracted your databases.<br /><br />How did this = happen?<br /><br />Our team has found a vulnerability within your site that= we were able to exploit. After finding the vulnerability we were able to g= et your database credentials and extract your entire database and move the = information to an offshore server.<br /><br />What does this mean?<br /><br= />We will systematically go through a series of steps of totally damaging = your reputation. First your database will be leaked or sold to the highest = bidder which they will use with whatever their intentions are. Next if ther= e are e-mails found they will be e-mailed that their information has been s= old or leaked and your site https://artwillbd.com was at fault thusly damag= ing your reputation and having angry customers/associates with whatever ang= ry customers/associates do. Lastly any links that you have indexed in the s= earch engines will be de-indexed based off of blackhat techniques that we u= sed in the past to de-index Our targets.<br /><br />How do i stop this?<br = /><br />We are willing to refrain from destroying your site's reputation fo= r a small fee. The current fee is $4000 in bitcoins (0.034 BTC).<br /><br /= >Send the bitcoin to the following Bitcoin address (Make sure to copy and p= aste):<br /><br /> bc1qsds43kee6tgrtnzt9rcyaxdvz3v6sya4sv43pt <br /><br />O= nce you have paid we will automatically get informed that it was your payme= nt. Please note that you have to make payment within 5 days after receiving= this e-mail or the database leak, e-mails dispatched, and de-index of your= site WiLL start!<br /><br />How do i get Bitcoins?<br /><br />You can easi= ly buy bitcoins via several websites or even offline from a Bitcoin-ATM.<br= /><br />What if i don't pay?<br /><br />We will start the attack at the in= dicated date and uphold it until you do, there's no counter measure to this= , you will Only end up wasting more money trying to find a solution. We wil= l completely destroy your reputation amongst google and your customers.<br = /><br />This is not a hoax, do not reply to this email, don't try to reason= or negotiate, we will not read any replies. Once you have paid we will sto= p what we were doing and you will never hear from us again!<br /><br />Plea= se note that Bitcoin is anonymous and no one will find out that you have co= mplied.<br><br>---<br><br>Date: July 21, 2025<br>Time: 4:23 pm<br>Page URL:= https://artwillbd.com/contact-us/<br>User Agent: Mozilla/5.0 (Windows NT 1= 0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrows= er/22.7.0 Yowser/2.5 Safari/537.36<br>Remote IP: 192.111.139.161<br>Powered= by: Elementor<br> --1753115014-eximdsn-120620648-- Back

Edit File : 1753115014.M910196P2993585.premium90.web-hosting.com,S=5265,W=5370 | Size : 5.14 KB

Envelope-to: likhxapw@premium90.web-hosting.com
Delivery-date: Mon, 21 Jul 2025 12:23:34 -0400
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@premium90.web-hosting.com>
To: likhxapw@premium90.web-hosting.com
References: <O6bltQMTqQdEBcZP1IhENsr80aGAMMAq7dvtEV0QHM@artwillbd.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1753115014-eximdsn-120620648
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1udtIc-0000000CbpF-3eV0@premium90.web-hosting.com>
Date: Mon, 21 Jul 2025 12:23:34 -0400

--1753115014-eximdsn-120620648
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

admin@artwillbd.com
    No Such User Here

--1753115014-eximdsn-120620648
Content-type: message/delivery-status

Reporting-MTA: dns; premium90.web-hosting.com

Action: failed
Final-Recipient: rfc822;admin@artwillbd.com
Status: 5.0.0

--1753115014-eximdsn-120620648
Content-type: message/rfc822

Return-path: <likhxapw@premium90.web-hosting.com>
Received: from likhxapw by premium90.web-hosting.com with local (Exim 4.98.2)
	(envelope-from <likhxapw@premium90.web-hosting.com>)
	id 1udtIc-0000000Cbp2-2ohL
	for admin@artwillbd.com;
	Mon, 21 Jul 2025 12:23:34 -0400
To: admin@artwillbd.com
Subject: New message from "Artwillbd"
Date: Mon, 21 Jul 2025 16:23:34 +0000
From: Artwillbd <email@artwillbd.com>
Message-ID: <O6bltQMTqQdEBcZP1IhENsr80aGAMMAq7dvtEV0QHM@artwillbd.com>
X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Sender: <likhxapw@premium90.web-hosting.com>

Name: Nikole Rios Email: hacked@artwillbd.com Phone: 3980068585 Se=
rvices: Design/Sample Image: Message: We have hacked your website h=
ttps://artwillbd.com and extracted your databases. How did this =
happen? Our team has found a vulnerability within your site that=
 we were able to exploit. After finding the vulnerability we were able to g=
et your database credentials and extract your entire database and move the =
information to an offshore server. What does this mean? <br=
 />We will systematically go through a series of steps of totally damaging =
your reputation. First your database will be leaked or sold to the highest =
bidder which they will use with whatever their intentions are. Next if ther=
e are e-mails found they will be e-mailed that their information has been s=
old or leaked and your site https://artwillbd.com was at fault thusly damag=
ing your reputation and having angry customers/associates with whatever ang=
ry customers/associates do. Lastly any links that you have indexed in the s=
earch engines will be de-indexed based off of blackhat techniques that we u=
sed in the past to de-index Our targets. How do i stop this? We are willing to refrain from destroying your site's reputation fo=
r a small fee. The current fee is $4000 in bitcoins (0.034 BTC). Send the bitcoin to the following Bitcoin address (Make sure to copy and p=
aste): bc1qsds43kee6tgrtnzt9rcyaxdvz3v6sya4sv43pt O=
nce you have paid we will automatically get informed that it was your payme=
nt. Please note that you have to make payment within 5 days after receiving=
 this e-mail or the database leak, e-mails dispatched, and de-index of your=
 site WiLL start! How do i get Bitcoins? You can easi=
ly buy bitcoins via several websites or even offline from a Bitcoin-ATM.<br=
 /> What if i don't pay? We will start the attack at the in=
dicated date and uphold it until you do, there's no counter measure to this=
, you will Only end up wasting more money trying to find a solution. We wil=
l completely destroy your reputation amongst google and your customers. This is not a hoax, do not reply to this email, don't try to reason=
 or negotiate, we will not read any replies. Once you have paid we will sto=
p what we were doing and you will never hear from us again! Plea=
se note that Bitcoin is anonymous and no one will find out that you have co=
mplied. --- Date: July 21, 2025 Time: 4:23 pm Page URL:=
 https://artwillbd.com/contact-us/ User Agent: Mozilla/5.0 (Windows NT 1=
0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrows=
er/22.7.0 Yowser/2.5 Safari/537.36 Remote IP: 192.111.139.161 Powered=
 by: Elementor

--1753115014-eximdsn-120620648--

Back