Someone found the fake phpinfo page (just static html) I put on my website and reported it as a vulnerability. lol.

The email layout has unnecessarily mutch effort put into it, was sent to multiple addresses including billing@..., and ends with a PayPal donation link. Website lists non-verifiable "achievements". Smells like llm to me.