OwlCyberSecurity - MANAGER
Edit File: 1664371625.M725347P776426.server310.web-hosting.com,S=13678,W=13969
Return-Path: <smarkiml@server200.web-hosting.com> Delivered-To: contact@printershut.com Received: from server310.web-hosting.com by server310.web-hosting.com with LMTP id iGCDKqlLNGPq2AsAan0uew (envelope-from <smarkiml@server200.web-hosting.com>) for <contact@printershut.com>; Wed, 28 Sep 2022 09:27:05 -0400 Return-path: <smarkiml@server200.web-hosting.com> Envelope-to: contact@printershut.com Delivery-date: Wed, 28 Sep 2022 09:27:05 -0400 Received: from [63.250.43.69] (port=29666 helo=asp-relay-shared.jellyfish.systems) by server310.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <smarkiml@server200.web-hosting.com>) id 1odX5d-003gcw-KA for contact@printershut.com; Wed, 28 Sep 2022 09:27:05 -0400 Received: from server200-4.web-hosting.com (server200-4.web-hosting.com [198.54.116.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by asp-relay-shared.jellyfish.systems (Postfix) with ESMTPS id 4Mcy2Y1r6lzySC for <contact@printershut.com>; Wed, 28 Sep 2022 13:26:56 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smartspeakerassist.com; s=default; h=Sender:Content-Transfer-Encoding: Content-Type:MIME-Version:Message-ID:Reply-To:From:Date:Subject:To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=bQ9CALH7yrv7vJNMK1nJu25CUIJW0KQFQNvOlZ0bZiA=; b=s5fGYZ2RxQgi3kFoyOz844CDzl BBO9xcfWq2asRk+1nyjCD60IFTk+ygOaycgfc0D0mfkFEB0Rvze1sb5/kpDUeF0BJEn3p5rfaKb3+ ZTMlpEzCLasGZGQaaEGjKIM7L484cilTA3QW7Oep2V8WcJs3fjV641uOYBD1HN/5q7NboYFkALpKL RWxDOdB4sA5AHiHrvC+qooKzw5HrC4yuc/OZRP4LhBnfDRpb+7OtWFgtftrFfH0KIt8NNsVd5xi3a LAz7pN1fhz/80rLI/uDYso//6yw0pzpVz50by9+5f52tH5UmprJOLlKo8bfkFZW2U55SuJ/+63r3t DBjZCP1A==; Received: from smarkiml by server200.web-hosting.com with local (Exim 4.95) (envelope-from <smarkiml@server200.web-hosting.com>) id 1odX5T-004R5l-Rk for contact@printershut.com; Wed, 28 Sep 2022 09:26:55 -0400 To: contact@printershut.com Subject: Smart Device "Your Site Has Been Hacked" X-PHP-Script: smartspeakerassist.com/index.php for 103.194.88.14, 103.194.88.14 X-PHP-Filename: /home/smarkiml/public_html/index.php REMOTE_ADDR: 103.194.88.14 Date: Wed, 28 Sep 2022 13:26:55 +0000 From: Smart Device <wordpress@smartspeakerassist.com> Reply-To: hacker@desterro.pb.gov.br Message-ID: <3uZs47HFLbnrzqRfhNMEuCGZkMrsfup7hcDJ1Kdct4E@smartspeakerassist.com> X-Mailer: PHPMailer 6.6.0 (https://github.com/PHPMailer/PHPMailer) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: <smarkiml@server200.web-hosting.com> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server200.web-hosting.com X-AntiAbuse: Original Domain - printershut.com X-AntiAbuse: Originator/Caller UID/GID - [5275 32007] / [47 12] X-AntiAbuse: Sender Address Domain - server200.web-hosting.com X-Get-Message-Sender-Via: server200.web-hosting.com: authenticated_id: smarkiml/from_h X-Authenticated-Sender: server200.web-hosting.com: wordpress@smartspeakerassist.com X-Source: X-Source-Args: X-Source-Dir: smartspeakerassist.com:/public_html X-From-Rewrite: unmodified, already matched X-NCJF-Result: /Yhj/F/Z/llwOJiSfbGmbfdnVAuuF1Fs1KMOcIJ7rTaJRcuKYiY1ZM244wxA5z9 ttSmpmvIX6hznpY96/BlJBhRSmzFX0Jwu8eQbVaMaBoJjyp8S5XdQ2JTSoDf2HM1RT4rGYFwgGQoD/ g55YuqlgoluRcYY8g1vfcm9Nr8KRxJ9HqeLGT+0UqJxJaLeyRaWg/6RCc36GvHNYwivxpWsyXZIPxS 1qBP/q7egP9wai8GnlOzU4UQkX/RbVQkv+0L4shIQGgLUeqbr6YpCKok/K4BLsc2X2Q6XQmK6fhYcB /1wDe6gJpNdY5FO/PvtN///uIMBQvz+I0H77q6YKb9qFqkcn1v7KziCIZUGjMzY5uMlvQiWvFC+Grb vDiBfGYY7ZK++BOV3c5tPKl5mWVIdt4tENGNh3a2ReGplnzEGQCcjmdejwTlSDmE68M2yfJr3V2qWC JYtiTedtmp3R7WbYBrGeByELKZB9wtPHhVFMCIAJIeEjj0ztOu0emYcwOeJ2XDYFungM7jo69ukHdu oOlwNjopM86Qjl5ZbFszlSoJUG3i/SHBPz632LoOT1bNkt3SNiu+lYo4BxsckwNzHitDR1Nkld6NIE /Di92oGqTwDXHe/YUkibx3k3GYZ2n8KEk6Y4hJUyOz9J3+KrQsUwxd3EB/NoEACCDfjzmdN7hkoOlb wSFAbyRcNbMq0mVwH7HlQsJoQsPxbh6Uhac2bKeUC05mooGbbo61//R9vck0PiT93PZYHIDIeHZ1nt mWTtFV/dV2UJgCTGy7H97fTvZi/FIVlTJL22RsBmX673+Ih2J2a0G6OkntSRdAdwUCOqm4rERLp6pN vKp2U9CmbFL7ykGZabYGi+3QpjlWMXfcnoZrERXY7ksrbFw3qs5ae/W2wKnrk3aKU9gnGaQZmsI79Z 2/LY3WFektJLxCeLDhbHo2oAhTifyZKRGGOpO67JWILNk6d3cbYklZDjoGM97j9NXjN0G6NbCLcdxD nLk/ZqcCLVQQmvgM2+qngLEVGXdXuvpSeksoc7CTrAf6xzdCrjRqnjorh3YI12B9OfK8Y81tWPZxpm N5WMgRR2naCnVXsqlGRGFdmvMCCLPCC4/xQ/d4i0JlkVApoM5etjmlVZpBLVHdn/1ib8X5MAhcrIvT JhzZncA9iCzjcbqSqv03nFVFmeNuOfextk2DWgTKykI9kZUgQS2o8jAb6gvD4+6hXvg2hLr5vhtweS 7CibB7cZtxKHLOMro9U/Wk5rWjPNkKgCn0rGOfchatFWH6nXTtJKDjjcaJG6cOdlGpKkhYXWS8hXMC aCfh+QH3RG9WKa1Jpgv92WdOThE59apbVr5zSvrCyJIgYL5xOizY7Gv5fX3NHPo47KaRBlgZe57AKT cIZcmmc5UfvRsWkt01SN0a9l+1qh7CWzg6QsuCxaZ+/WKGf4ToBrQ4jweaxy4yZl7P0RJJlUuaKgkm qpJ326SLOG+Q8sqq32rjUcc+3WniVglBQevLwvpQJVY5HI/m5Za5CvTsctfF8qw6qmakCTGToqgrSf NrN1ufZYKi/eg8aDUMa+hngFzfG9p4IZIU8STaXXqQovOE3WA9O/CVYgCDPfenOQ5xofLDyK11c+zU FmfTT7mRa3kYZCyofctrw51js8NKmpBnd/WbfZNu+LlUFE51zPDZ+X/e8hNNhpcDmeVYlO+zoJK1DS 16ed+og6qcCPLyrrhYjDTu6yE7UM9br6Nosk/edEUjdxunw7pA/vz9Pi9gKviXbfAcIpuRoWddrhYF mO/EhEU0LLUhN2gvBjyyRSlc6OTVciNLVxoMf4u5ZWoEOQrBwRajLjJeotq1JkqoypvjX/Fw7vpGgU jtrQG0UN61Im9qaOcu0s5LU/bz19maIhK3MBxdAgDDsxC5HY61bmg0l6hrISBTHawI67qJ7Dk7Nrn6 b64YpT47B8gkG/w/daDI6Oaau7MZ0FcvV4COrlsE/cQoLYwOaQAsrtPJRzGFNxMr8VZtXWQeEtRhK9 ZA4x17q0TGyT74Xe9Ei2tjyFMwzJVtOs7X3z/Jbq+WQtmCqBcAxKlis6+AhWUG30HXKahdW8I+ZHJ5 jHLB4XB/zliRdTkBeUGlc/daVAUEsYstnsFkvyfipx6Iaj1piDr+XTxNctqlZLtyOiI/uUhPQ9rdQd C2zgqUXuC3aXfhlkt89SInackLiPubfzaxIdTuLNH1yojSMgZrwkUjVpDAWtKyO5CKgN6msgjDRIhX ZClNukyZZdthP87q+HncgykrAe3VAp0tc5Eh9aDI3X5u+rCGM73BBcJVxkJHGf8IT1fZFPZzMz7GRJ DSanyfDr3qtELVyjYgI1pGI0zuB/8Mxb7tUVEiwJYmWS9gUZalxsW+0cffBu/JlkBfBUnwN72N5S8m +SsZdL728WMJUnz+Fb4q2/SToLGtb0mt8eSQQ9rue2WXs7o3g5Q7Y+xw40xX/Y57VJwQ3l95NtJZy0 So+3EN0RKIc9nB8sP0juKY0iOc0cVAOnLU9WNeXmPNDOcUW+j5nWi88W8K4dl36rS5aV3r6kR1Px7i Bp8dV4IyZk7lYIXGIgOwRL1AuMe9J8Ky0GdZYB6CtV94OQn6dp2Gif5+IiC5nb/0qNa8khV8OgdP8u rcXABwUO1h8t4JN5Hsy4nEi3TKbEJG0j/192Yunb0g4FJ/mcK7t7JnmHtL63n/fXKCK8TOpB+WvrkI ocy+b6g4X/Z2rvj90lMD9NWX2jQUlt/qzrRUmNZSmZvlpbZj8drtxH2FTUdNKVWIXezX97BeNICNbY qnUqtMj+ubmIJbKIfWqv/eRycnPMmNqS4Gzb5Lm24a0XF3yt+ARKIskUDPxONUuyeXTHnZMDhJ99rl 2sxwZWWwTX5Fkwpmy4YwVzyBrbvK7dgm5yHzmY4GHxmpb9MBLXGQAbNoIkR1W/yXVwZEYRWP5wiCOA XiUpaWluyJPwy1pVk/HVFZXB6U0dayfDzdHQxPP01ox3989lATNi90CKC9MBF0aInfJhtF6Wwxjn6X xI8wC7yjJrLKaQZssdpa0LMoCAs4J9uF8H36ft6dL2suYIlz+leAEpHSx41FO6AHTv1dz5wkNoFD1C feSzXxZyi/TybQHtbhZaEVNkKQhlNJQMY0e3cg6V6UxubTIdqSN3gQ8sTkMk1r5QFGDW+vYKFRGxXc Y/4SJtJ3+KLQOUaSYlI3T0DZKdTVY/vipyjer2GaP24VBaLFAtVqWp8T+lSmk51paFVmGae+jhwMLg pakHmiqHcnjDszvE9YgLtf8DFocB2XzDeadBjJlQliip4ThaTq0/6Mvs8hm0mULrzf1/wuGb9upYoX jdbujDh7hNq2542BjsolV3Z3Gm2y1Xb6nzfqaPJ3zZlz3H8mKdbNa/JalIgJDw84zKNV50TZ6d62UO +UWnflX/S6LV8k3dPfujnTTAefut6AY/KiEd9kpb1f6t4w8HXxcd6/DdwhYoDW8TC7X8G8ym110c3A woCAyPpWTVTEQ3xod4WhEI/Zym321XnXSVw0QtCseizUuF6kt401ceQFFKpauE8KK0F1AJy/2CzKMQ Hp3jhzgFfQTylL1FgyRZOXJPWO4Bz7EJ8jKuN/UC7lteK0DSxiXqm6cCYAb63bMRZ1O9DzQGSGuad/ jl6+SVJnmL3vPOG28tEniCojogvt6vZ04XGym0iqlvW8mDC3oz7vd7EEzhxEoSgTVrw/ae4kV3lB0s pZZSE9WyIreQwVjevxzrFuylnQBXI4m1/Fvh6GfXaw3PiToQjdsfHUWN+Z8+0weB3sjNZvDnymZi1K VH4CeinxwKtqwC3SIAp4Gc7GNU93KZzxbeEYwojyIwjSDdLrF6WxWWH8G7pB+03ohkedkCm3U0b4mt cdT1H7bT4q5KwrXNTzxcs9uk2cgbXgE+Ih+bjbSObrYzwjOzIXRG0x/056nHPeHXTbaxSrmDaMpcXW 2QsCSXN10aLGi8cNZ/NVrs1xIMIFjnJT7MnDh4vOiPaWzyDPdBfRTxBxjTg7lSQ4BB7Bm7D69CPQNc 0FfH368mncS+6SyBwxCGsa8Vs0IpUTlX9A3YriyoDe4SPRFC9rUfPiR2G5Z39nYJ72Ei5f+51TChJT dqybK/JblrdbwcrLNR+uIToqpGGD7SMyEdIjlfG/YszwPCp9bDjNTtUny5eEU8XmWvT3oyqqWcC89s hk3PEK0MQiX9OcFXml09Wt8HhUgA7XuGobiPr4PQSdThJj6BMVIq5BQmA+YzZYFkxmfTvrFkocOHbT EwwXesxcmcMQuwiZyVeNLBgPioXhbtYR1kVfgTGmBKZQhVvXG/X+A9xyleNVcmdjEk4zIdA/9WTBPC HVEqhjAVvdU9ivQdgqhGSipy+TLgoWehvuKhpfKeS0o8sj0Fr1ZS/ePb0CZq9VumZSFldxL2MioTve ut3bXwnu9cqn/jBid00I2s2j1ng2daeWwnY2w8NutjErLDzTlMh3BYvzF69F33KTp+h2/oMmzI6L32 Ia/Ncgre2C2aOZPGF1GH44zwNd91zvnKepadFBNRbYx0TBt6wFJ/fsZct/feTeNCqyanLhjUsc7n7l j1Bklp/nfY4Ce+AER9aN0qi1LXLlqgmc+bJhP6sPwQz7I89DQEXyT8E++YFcVMn6fi4PuVW7ZrKGGM 2Am3eg385fkxnuI4uhuXBtWubln/yZ9i0I3FyOdYD0i/XAlLlEcxcCmyefx2dpFuGoDLu+POYUCKRi yDiNEEUu7BQOVpByWLyHfCusswHOYhC4BJGAMIi06Lm6fwlhwUdef592DQpDnjA7e6pWP8LdK7LYNC mfFysqFJeHwsa4yrobUUJgWxKtWsDXJ0+fIqeZS1EjDlFzcHYKBWYK9s50OKRuy/VzZ1XIIk6t/kJx 9iNxBTPQQAEFFu5xIdsdFTQz6XFfye2tLvXS/aUKbGAvMZ/bI//sn1zi8gwq4JmEM5BzgmZvhA1KoM EquQFGK4d+IJiXt3D8dzEuIZ4JltG9CVWJFmiQq4VTi2tW3G1hmLPv2RdYYKqrGZ0scucRrgsUXA/Q EDFkAUntPTlPxqH1kZfLU1cLmaaLMLGYCSwNUjZEc12E7/EQX0V1o7qV+vfKnzlJ4vWUbaqUE6WN0s POkBCiekQAs2TerXHNYCt956CT6CILKLbHoAPqjMAjPJejNtA74m1jyM4bViTLSYjkSL0rCcdGnnVs 1nF+QkdgwzCNmalb9lSpiWzqecY6RuHOXhfcP3iah6kAFbt3mk9wXpqImYX9rOXtRCPcMCnQg9rP5x N0mKX/8nHUPUgQNqlkXd91adHOE0Y1mCKKfxISwnmMXTrVmjFHmEAS/PPwT0M+uZm9TJp05PveX/fH BeY5ZRCntNSbuQjMQNVmfkNlqY14HJYD01PwHSZDF/fmvQSJJI2pv/PxVPNF6jHIVAYL1gRKfwWWGd tY80KRpHYj3AUyiIbyBkozkOaKF5crDLYnpi0oDSMztaGcwiUZWVXdM7Lj6Szj8erwjIiEkM3GYEUE Bx2PzdRhext8hcdnXX7U4Pte99bT5CeVWV3dIIXYCMtKEkjIV3ETlVN3+5OQEigNlHjb+GkG6272EC XLoEWiK4bGBKUsgvET/JrOY4hbWN+rPRt0NELHUYVQkwR4cbXVAOdcpIvwxcDCEmmKaXGKA1Bcto5e Lt2C2dXkE8coAbAR0CBuCkzLiPOomkjsPrh71ovV6Hccj8AWSt5kUSlGfZ2NXrP8NbGdjWhqiWYi2H KS/Wkw0Uog+yHriCTFzLnAFW57kzepDln5AlNjxGEziTif2MKy+nO4Rwf5TJiqUjJvS9AWfwpPJHa1 ZikfK/y89VeCc1tpHQADBoTDPKLubLLxXhudJiSNuVU3X0JEL2TfA9RSvYqH1/zOD5I898Cpz5O633 /P+Z+wAX/mOcIR/3HT6qC4mSVUplF8OlGRS4HE6k45s4mEt3TEp1hhiBjsZ1avv/iZ1glc4OJlZv49 8WDZjec4M5dt0EQsVY3ASdhTWuHuRTLuJ41ub3+5n3+cxabFMsogA+f3omyyeNp7U4jX9hnHbxQxqw pgaVH5Hf6Ug1mjwbdTlXY+xVoOLg3caHrrq9SJQrCxUl3WTmjDWy1/pmor8ljAMk1fDA9PU758hffP S4h6bCBDiK5IPdcvNrnONeuegqqZsf+FQIvZaIp/NKwmS/bLS7XmmSK29ijKMfFsrsUuhJjlG+hI9V U5hvbQQaDMcl9dEhTZY8/eyYFXQg/JymCJDq0b0NEl39Kuw0ih8N1aARZqUCXFhYyGkCnlRWGmfbCs CSQtE5VEGZe1lNxWkKUVSGFnPmlnM+WOb9u+V+odsMPJh9rYcbdeCi42IqcHr7H+J10hqPLHp3aN4y DEbMwNX01++yFg4nCLvxG0MhE0EFKCngcE3K20Wa3Yb7wURLFIMKiMxYdLsc1FAT8vqnpJG5d6Lao7 AlTWFMTwt6IpAmZ7ibeOtLGAmmxx87W7MS01g2Ro2yqu7AVSNo+SvnaQu35B6hOevNM+gHz+U5HGFw W/e0xb3DIO0O16hBpeuBZjE4LfCwcqcVJEoFC6t+adx8JmSvPffKqS0JTLJlzkwxPCLHhSip3BGEWp YHFOtXlKAlMuKoMTGFcAQ7pBraDKkdfTEKBQWpiyVbGzKhfFo4tRmIg46l7oMDBjMqcfvIHoiDSLOg fQjaP9XYOVbBpj+1U3lECaYS1ufldDaz/dPzRQUSjrtp95Vvc324Fvh1PCAgdN87izAHrrSpDBskfp sU4eQnpjcaBWWyhfe9xRdNSkEJjrLVpqTPys4l01BOxwWcyFy155wMukCaMwZyRImjFIxPSP7xFH0S Im3+fQrgALS8cS2mJeLOgsFzRoUQ+6DvGm5nbaV50rwUs92EFAQhY0dKxMAIf+iqrvbs+6ndkVf9g= = X-NCJF-Version: 2 Authentication-Results: asp-relay-shared.jellyfish.systems; dkim=pass header.d=smartspeakerassist.com header.s=default header.b=s5fGYZ2R; dmarc=none; spf=none (asp-relay-shared.jellyfish.systems: domain of smarkiml@server200.web-hosting.com has no SPF policy when checking 198.54.116.16) smtp.mailfrom=smarkiml@server200.web-hosting.com From: Wendi Teresa <hacker@desterro.pb.gov.br> Subject: Your Site Has Been Hacked Message Body: Your Site Has Been Hacked PLEASE FORWARD THIS EMAIL TO SOMEONE IN YOUR COMPANY WHO IS ALLOWED TO MAKE IMPORTANT DECISIONS! We have hacked your website https://smartspeakerassist.com and extracted your databases. How did this happen? Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server. What does this mean? We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your https://smartspeakerassist.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we used in the past to de-index our targets. How do I stop this? We are willing to refrain from destroying your site’s reputation for a small fee. The current fee is $2500 in bitcoins (BTC). Please send the bitcoin to the following Bitcoin address (Copy and paste as it is case sensitive): 3LKf6NWhJA8L5cmD5p9u6WksjW9SC2jauu Once you have paid we will automatically get informed that it was your payment. Please note that you have to make payment within 7 days after receiving this e-mail or the database leak, e-mails dispatched, and de-index of your site WILL start! How do I get Bitcoins? You can easily buy bitcoins via several websites or even offline from a Bitcoin-ATM. What if I don’t pay? If you decide not to pay, we will start the attack at the indicated date and uphold it until you do, there’s no counter measure to this, you will only end up wasting more money trying to find a solution. We will completely destroy your reputation amongst google and your customers. This is not a hoax, do not reply to this email, don’t try to reason or negotiate, we will not read any replies. Once you have paid we will stop what we were doing and you will never hear from us again! Please note that Bitcoin is anonymous and no one will find out that you have complied. -- This e-mail was sent from a contact form on Smart Device (https://smartspeakerassist.com)