Gecko [ renovalkoronred.com.tr ]

Name	Size	Permission
1629489897.M178279P19824.penta...	2.86 KB	-rw-r-----
1630007182.M770374P25526.penta...	2.62 KB	-rw-r-----
1630007183.M47932P25526.penta....	2.62 KB	-rw-r-----
1630605068.M498679P27064.penta...	2.63 KB	-rw-r-----
1630605068.M756663P27064.penta...	2.63 KB	-rw-r-----
1631045125.M349117P31777.penta...	3.14 KB	-rw-r-----
1631123080.M558112P6509.penta....	13.38 KB	-rw-r-----
1631138223.M330426P13126.penta...	2.56 KB	-rw-r-----
1631140091.M573148P2251.penta....	2.54 KB	-rw-r-----
1631140725.M683610P11886.penta...	11.5 KB	-rw-r-----
1631148827.M172688P7881.penta....	7.17 KB	-rw-r-----
1631150975.M774653P10641.penta...	11.89 KB	-rw-r-----
1631174992.M898223P9751.penta....	3.04 KB	-rw-r-----
1632170692.M786417P30809.penta...	14.79 KB	-rw-r-----
1632170736.M456923P30809.penta...	14.72 KB	-rw-r-----
1632173068.M633394P13207.penta...	13.26 KB	-rw-r-----
1633354946.M667289P8185.penta....	13.56 KB	-rw-r-----
1669807867.M86608P30406.penta....	2.95 KB	-rw-r-----
1669981021.M555775P16990.penta...	3.01 KB	-rw-r-----
1671144536.M576615P7771.penta....	3.31 KB	-rw-r-----
1671192027.M469907P21048.penta...	3.58 KB	-rw-r-----
1672745347.M217740P22646.penta...	2.91 KB	-rw-r-----
1673331643.M991733P1723.penta....	3.41 KB	-rw-r-----
1674038442.M696946P18265.penta...	2.87 KB	-rw-r-----
1674663153.M206095P24542.penta...	3.47 KB	-rw-r-----
1674663235.M963617P28086.penta...	2.85 KB	-rw-r-----
1674734791.M331555P28015.penta...	3.06 KB	-rw-r-----
1674753641.M127242P32549.penta...	2.87 KB	-rw-r-----
1674811425.M795787P32727.penta...	5.39 KB	-rw-r-----
1675413376.M476022P20107.penta...	2.95 KB	-rw-r-----
1675558383.M582389P9283.penta....	2.92 KB	-rw-r-----
1675834074.M72576P25546.penta....	2.87 KB	-rw-r-----
1676699743.M421533P19183.penta...	2.9 KB	-rw-r-----
1676861961.M189480P14198.penta...	2.97 KB	-rw-r-----
1676995463.M862375P29263.penta...	2.85 KB	-rw-r-----
1677048392.M860220P6046.penta....	2.99 KB	-rw-r-----
1677148907.M620196P2693.penta....	3 KB	-rw-r-----
1677283659.M278089P24366.penta...	3.29 KB	-rw-r-----
1677318114.M756846P19091.penta...	2.86 KB	-rw-r-----
1677748275.M494354P22953.penta...	3.14 KB	-rw-r-----
1677859704.M10343P17629.penta....	2.85 KB	-rw-r-----
1678363952.M463254P18884.penta...	2.94 KB	-rw-r-----
1678562912.M460020P16197.penta...	3.79 KB	-rw-r-----
1678621718.M141703P29008.penta...	2.98 KB	-rw-r-----
1678754720.M768532P14107.penta...	4.44 KB	-rw-r-----
1678810119.M693760P28535.penta...	4.46 KB	-rw-r-----
1678995074.M985318P11258.penta...	3.35 KB	-rw-r-----
1679056655.M155775P2407.penta....	2.85 KB	-rw-r-----
1679450898.M576329P16008.penta...	4.12 KB	-rw-r-----
1679566360.M282194P13339.penta...	4.31 KB	-rw-r-----
1680067291.M973162P31732.penta...	3.26 KB	-rw-r-----
1680206331.M71820P25761.penta....	3.78 KB	-rw-r-----
1680435709.M905863P16562.penta...	2.81 KB	-rw-r-----
1680843896.M622448P20276.penta...	3.88 KB	-rw-r-----
1682151205.M74907P4384.penta.h...	3.04 KB	-rw-r-----
1682261300.M133538P7996.penta....	2.94 KB	-rw-r-----
1683394424.M128540P14498.penta...	3.24 KB	-rw-r-----
1684577493.M311930P31157.penta...	3.06 KB	-rw-r-----
1685227208.M407026P30368.penta...	2.97 KB	-rw-r-----
1685604522.M509190P23408.penta...	3.02 KB	-rw-r-----
1685662628.M955310P25655.penta...	5.33 KB	-rw-r-----
1686080765.M375624P30337.penta...	2.76 KB	-rw-r-----
1686429466.M231468P30808.penta...	2.93 KB	-rw-r-----

Code Editor : 1679566360.M282194P13339.penta.hozzt.com,S=4410,W=4495

Envelope-to: renovkoron@penta.hozzt.com
Delivery-date: Thu, 23 Mar 2023 13:12:40 +0300
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@penta.hozzt.com>
To: renovkoron@penta.hozzt.com
References: <xu6U8C3sZQ9jPsyz1pezI7Y8ORZulfZpLOGAqQsoO8@renovalkoronred.com.tr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1679566360-eximdsn-2064226920
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pfHw0-00049C-0a@penta.hozzt.com>
Date: Thu, 23 Mar 2023 13:12:40 +0300

--1679566360-eximdsn-2064226920
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

siparis@renovalkoronred.com.tr
    host mx.yandex.net [77.88.21.249]
    SMTP error from remote mail server after end of data:
    552 5.2.2 Mailbox size limit exceeded 1679566362-eCoYuf7PHCg0-PpChoilS

--1679566360-eximdsn-2064226920
Content-type: message/delivery-status

Reporting-MTA: dns; penta.hozzt.com

Action: failed
Final-Recipient: rfc822;siparis@renovalkoronred.com.tr
Status: 5.0.0
Remote-MTA: dns; mx.yandex.net
Diagnostic-Code: smtp; 552 5.2.2 Mailbox size limit exceeded 1679566362-eCoYuf7PHCg0-PpChoilS

--1679566360-eximdsn-2064226920
Content-type: message/rfc822

Return-path: <renovkoron@penta.hozzt.com>
Received: from renovkoron by penta.hozzt.com with local (Exim 4.96)
	(envelope-from <renovkoron@penta.hozzt.com>)
	id 1pfHvx-00048j-2m
	for siparis@renovalkoronred.com.tr;
	Thu, 23 Mar 2023 13:12:37 +0300
To: siparis@renovalkoronred.com.tr
Subject: =?us-ascii?Q?RENOVAL_KORONRED_"Your_Site_Has_Been_Compromise?=  =?us-ascii?Q?d"?=
X-PHP-Script: renovalkoronred.com.tr/index.php for 37.46.113.169
X-PHP-Originating-Script: 1840:PHPMailer.php
Date: Thu, 23 Mar 2023 10:12:37 +0000
From: RENOVAL KORONRED <siparis@renovalkoronred.com.tr>
Reply-To: hacker@tom-as.pl
Message-ID: <xu6U8C3sZQ9jPsyz1pezI7Y8ORZulfZpLOGAqQsoO8@renovalkoronred.com.tr>
X-Mailer: PHPMailer 6.6.5 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8

From: Daulton <hacker@tom-as.pl>
Subject: Your Site Has Been Compromised

Message Body:
We have hacked your website renovalkoronred.com.tr and extracted your databases. This was due to the security holes you had in your your site/server which have gained us remote control of pretty much everything that was on the server.

Our team is mostly interested in customer, administrative, and employee information which we have extracted through your databases once we got remote control over the server. It still needs to be sorted out but it will be well-organized once finished. First, we will be going through the emails/sms information and contacting the recipient how you held in disregard about their information being exposed to a hacking group when you could have stopped it. This would be detrimental to your personal image with these relationships with these people. Lastly, now that we have information not only will we be monetizing off it with our methods but made public or sold to other people that will do whatever they wish with the information also after we are done.

Now you can put a stop to this by paying a $3000 fee (0.11 BTC) in bitcoin to the address 3CCPQNGJyaR6DWru7M2xoKiiDzZd2AGKzg We will be notified of payment which we will then delete the information we have obtained, patch the hole in the site/server which we got in and remove you from any future targeting in the future. You have 72 hours in doing so after viewing this message or the series of steps will commence. You can obtain bitcoin through such services such as paxful.com or do a search on bing.com

-- 
This e-mail was sent from a contact form on RENOVAL KORONRED (https://renovalkoronred.com.tr)

--1679566360-eximdsn-2064226920--

${this.title}

Code Editor : 1679566360.M282194P13339.penta.hozzt.com,S=4410,W=4495