AutoShell

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti* dfhdfhhdfdfhdhfhfdhdfdhfdhfdfhhdfdfhdhfhdf AutoShell

?? Editing: 1667257526.M599518P79526.saman.dnswebhost.com,S=9599,W=9812

Envelope-to: info@metalstairs.ir
Delivery-date: Tue, 01 Nov 2022 02:35:26 +0330
Disposition-notification-to: inigoayes@euskalnet.net
Date: Mon, 31 Oct 2022 16:04:25 -0700
From: "inigoayes@euskalnet.net" <inigoayes@euskalnet.net>
Subject: Your Website Has Been Hacked
Sender: inigoayes@euskalnet.net
To: info@metalstairs.ir
Reply-to: "inigoayes@euskalnet.net" <inigoayes@euskalnet.net>
Message-id: <0870399266a2888764ce872cc92d070fd4e01f@euskalnet.net>
MIME-version: 1.0
Content-type: multipart/alternative;
 boundary="Boundary_(ID_h8K5fP/kKBAD31NuAh3DPQ)"
    
 Content analysis details:   (4.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: metalstairs.ir]
  0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
  0.1 TRACKER_ID             BODY: Incorporates a tracking ID number
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.5 BITCOIN_SPAM_09        BitCoin spam pattern 09
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  1.0 GB_BITCOIN_CP          Localized Bitcoin scam
  1.0 BITCOIN_DEADLINE       BitCoin with a deadline
  0.0 T_MANY_HDRS_LCASE      Odd capitalization of multiple message headers
X-Spam-Flag: NO

--Boundary_(ID_h8K5fP/kKBAD31NuAh3DPQ)
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: quoted-printable

Website Has Been HackedYour Site Has Been Hacked

PLEASE F0RWARD THIS EMAIL To S0MEoNE IN Y0UR CoMPANY WH0 iS ALL0WED To MA=
KE IMPORTANT DECISIoNS!

We have hacked y0ur website https://metalstairs.ir and extracted your dat=
abases.

H0w did this happen?

0ur team has found a vulnerability within y0ur site that we were able t0 =
exploit. After finding the vulnerability we were able t0 get y0ur databas=
e credentials and extract y0ur entire database and m0ve the informati0n t=
o an offsh0re server.

What d0es this mean?

We will systematically go through a series 0f steps 0f t0tally damaging y=
our reputation. First your database will be leaked or sold to the highest=
 bidder which they will use with whatever their intenti0ns are. Next if t=
here are e-mails f0und they will be e-mailed that their inf0rmation has b=
een sold or leaked and your site https://metalstairs.ir was at fault thus=
ly damaging your reputation and having angry customers/ass0ciates with wh=
atever angry customers/ass0ciates do. Lastly any links that you have inde=
xed in the search engines will be de-indexed based off 0f blackhat techni=
ques that we used in the past t0 de-index our targets.

How do i stop this?

We are willing to refrain fr0m destroying y0ur site=E2=80=99s reputati0n =
f0r a small fee. The current fee is $3000 in bitcoins (0.15 BTC).

Please send the bitcoin t0 the following Bitcoin address (C0py and paste =
as it is case sensitive):

32CgwYoY3X1ptMDoa7stSCzStYcsLKvjeR

=C2=A0once y0u have paid we will aut0matically get inf0rmed that it was y=
our payment. Please note that you have to make payment within 3 days afte=
r opening this e-mail or the database leak, e-mails dispatched, and de-in=
dex 0f your site WiLL start!

H0w d0 i get Bitcoins?

Y0u can easily buy bitcoins via several websites 0r even 0ffline fr0m a B=
itcoin-ATM.

What if i don=E2=80=99t pay?

if y0u decide not to pay, we will start the attack at the indicated date =
and uph0ld it until y0u d0, there=E2=80=99s n0 c0unter measure t0 this, y=
ou will only end up wasting more m0ney trying to find a solution. We will=
 c0mpletely destroy your reputati0n amongst google and y0ur customers.

This is n0t a h0ax, do n0t reply to this email, don=E2=80=99t try t0 reas=
0n or neg0tiate, we will n0t read any replies. 0nce y0u have paid we will=
 st0p what we were d0ing and y0u will never hear fr0m us again!

Please note that Bitcoin is anonym0us and no one will find out that y0u h=
ave complied. Finally d0n't reply as this email is unm0nitored.

--Boundary_(ID_h8K5fP/kKBAD31NuAh3DPQ)
Content-type: text/html; charset=utf-8
Content-transfer-encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div>Website Has Been HackedYour Site Has Been Hacked</div>
<div>&nbsp;</div>
<div>PLEASE F0RWARD THIS EMAIL To S0MEoNE IN Y0UR CoMPANY WH0 iS ALL0WED =
To MAKE IMPORTANT DECISIoNS!</div>
<div>&nbsp;</div>
<div>We have hacked y0ur website https://metalstairs.ir and extracted you=
r databases.</div>
<div>&nbsp;</div>
<div>H0w did this happen?</div>
<div>&nbsp;</div>
<div>0ur team has found a vulnerability within y0ur site that we were abl=
e t0 exploit. After finding the vulnerability we were able t0 get y0ur da=
tabase credentials and extract y0ur entire database and m0ve the informat=
i0n to an offsh0re server.</div>
<div>&nbsp;</div>
<div>What d0es this mean?</div>
<div>&nbsp;</div>
<div>We will systematically go through a series 0f steps 0f t0tally damag=
ing your reputation. First your database will be leaked or sold to the hi=
ghest bidder which they will use with whatever their intenti0ns are. Next=
 if there are e-mails f0und they will be e-mailed that their inf0rmation =
has been sold or leaked and your site https://metalstairs.ir was at fault=
 thusly damaging your reputation and having angry customers/ass0ciates wi=
th whatever angry customers/ass0ciates do. Lastly any links that you have=
 indexed in the search engines will be de-indexed based off 0f blackhat t=
echniques that we used in the past t0 de-index our targets.</div>
<div>&nbsp;</div>
<div>How do i stop this?</div>
<div>&nbsp;</div>
<div>We are willing to refrain fr0m destroying y0ur site=E2=80=99s reputa=
ti0n f0r a small fee. The current fee is $3000 in bitcoins (0.15 BTC).</d=
iv>
<div>&nbsp;</div>
<div>Please send the bitcoin t0 the following Bitcoin address (C0py and p=
aste as it is case sensitive): </div>
<div>&nbsp;</div>
<div>32CgwYoY3X1ptMDoa7stSCzStYcsLKvjeR</div>
<div>&nbsp;</div>
<div>&nbsp;once y0u have paid we will aut0matically get inf0rmed that it =
was your payment. Please note that you have to make payment within 3 days=
 after opening this e-mail or the database leak, e-mails dispatched, and =
de-index 0f your site WiLL start!</div>
<div>&nbsp;</div>
<div>H0w d0 i get Bitcoins?</div>
<div>&nbsp;</div>
<div>Y0u can easily buy bitcoins via several websites 0r even 0ffline fr0=
m a Bitcoin-ATM. </div>
<div>&nbsp;</div>
<div>What if i don=E2=80=99t pay?</div>
<div>&nbsp;</div>
<div>if y0u decide not to pay, we will start the attack at the indicated =
date and uph0ld it until y0u d0, there=E2=80=99s n0 c0unter measure t0 th=
is, you will only end up wasting more m0ney trying to find a solution. We=
 will c0mpletely destroy your reputati0n amongst google and y0ur customer=
s.</div>
<div>&nbsp;</div>
<div>This is n0t a h0ax, do n0t reply to this email, don=E2=80=99t try t0=
 reas0n or neg0tiate, we will n0t read any replies. 0nce y0u have paid we=
 will st0p what we were d0ing and y0u will never hear fr0m us again!</div=
>
<div>&nbsp;</div>
<div>Please note that Bitcoin is anonym0us and no one will find out that =
y0u have complied. Finally d0n't reply as this email is unm0nitored.</div=
></body></html>

--Boundary_(ID_h8K5fP/kKBAD31NuAh3DPQ)--

Path:

home / opexmaga / mail / metalstairs.ir / info / new /

?? Editing: 1667257526.M599518P79526.saman.dnswebhost.com,S=9599,W=9812

Path:

?? Upload