this i got in my log from them, {
"took" : 13,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 1,
"relation" : "eq"
},
"max_score" : 1.0,
"hits" : [
{
"_index" : "read_me",
"_id" : "u3wKgJ0BO_WgW1QkshCm",
"_score" : 1.0,
"_ignored" : [
"message.keyword"
],
"_source" : {
"message" : "Your database has been deleted from your server, but all the information remains stored on our cluster. The instructions for recovery are as follows: You must send 0.0041 BTC to the following wallet: bc1q38rjul6gdamfflf6p4ukz0ymtvfgfv2j9saf6r . Then, you must send an email to wendy.etabw@gmx.com with the following code: 0SH7HH1Q72JL (it is important that you write it correctly, as it corresponds to your database). You must also attach the txid (the Bitcoin transaction ID) to the message. After following these steps, we will send you a zip file with all your information. You have 48 hours to complete the steps. For More Info - https://tli.sh/73x1k "
}
}
]
}
}

Did ransomware on several MySQL CTF rooms