From 87bb321a406f31798aa43fa1da213a988ea00029 Mon Sep 17 00:00:00 2001 From: imrcli-remediator Date: Sat, 18 Jul 2026 17:50:31 +0200 Subject: [PATCH] =?UTF-8?q?quarantine:=20family=3Ddefacement-seo=20(18=20f?= =?UTF-8?q?=C3=A1jl)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit vhost: www.archlinexp.eu rel_path: administrator/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 5098 vhost: www.archlinexp.eu rel_path: cache/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 5021 vhost: www.archlinexp.eu rel_path: captain.json result: quarantined evidence_sha256: 1f43ac8f363075c7926d2ac1a30b8f94df9d913c1e5b68b5da30b5109f4bfc25 timestamp: 20260718T155031Z finding_ref: 4880 vhost: www.archlinexp.eu rel_path: cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 4863 vhost: www.archlinexp.eu rel_path: images/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 5162 vhost: www.archlinexp.eu rel_path: maintht.json result: quarantined evidence_sha256: e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc timestamp: 20260718T155031Z finding_ref: 4881 vhost: www.archlinexp.eu rel_path: media/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 4990 vhost: www.archlinexp.eu rel_path: night.html.json result: quarantined evidence_sha256: e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc timestamp: 20260718T155031Z finding_ref: 4870 vhost: www.archlinexp.eu rel_path: nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T155031Z finding_ref: 4943 vhost: www.archlinexp.eu rel_path: templates/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 4951 vhost: www.archlinexp.eu rel_path: templates/night.html.json result: quarantined evidence_sha256: e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc timestamp: 20260718T155031Z finding_ref: 4953 vhost: www.archlinexp.eu rel_path: templates/nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T155031Z finding_ref: 4959 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 4967 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/night.html.json result: quarantined evidence_sha256: e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc timestamp: 20260718T155031Z finding_ref: 4968 vhost: www.archlinexp.eu rel_path: templates/shaper_helixultimate/nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T155031Z finding_ref: 4973 vhost: www.archlinexp.eu rel_path: templates/system/links.db result: quarantined evidence_sha256: 5bade5d7cd10376ddaf7992d905e39cb055a14210ddeb76116b230974ad6d3be timestamp: 20260718T155031Z finding_ref: 4960 vhost: www.archlinexp.eu rel_path: tmp/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T155031Z finding_ref: 5222 vhost: www.archlinexp.eu rel_path: x9txt.json result: quarantined evidence_sha256: 35a68c9a692d1d2fc59a7a6e9f4d686c97ec377515e1928af21a982a34e96d7b timestamp: 20260718T155031Z finding_ref: 4871 --- .../archlinexp.eu/www/administrator/cox.json | 1 + .../www/administrator/cox.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/cache/cox.json | 1 + .../www/cache/cox.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/captain.json | 1 + .../www/captain.json.evidence.json | 15 ++ var/www/hosting/archlinexp.eu/www/cox.json | 1 + .../archlinexp.eu/www/cox.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/images/cox.json | 1 + .../www/images/cox.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/maintht.json | 92 ++++++++++ .../www/maintht.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/media/cox.json | 1 + .../www/media/cox.json.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/night.html.json | 92 ++++++++++ .../www/night.html.json.evidence.json | 15 ++ .../archlinexp.eu/www/nxproof.php.json | 1 + .../www/nxproof.php.json.evidence.json | 15 ++ .../archlinexp.eu/www/templates/cox.json | 1 + .../www/templates/cox.json.evidence.json | 15 ++ .../www/templates/night.html.json | 92 ++++++++++ .../templates/night.html.json.evidence.json | 15 ++ .../www/templates/nxproof.php.json | 1 + .../templates/nxproof.php.json.evidence.json | 15 ++ .../templates/shaper_helixultimate/cox.json | 1 + .../cox.json.evidence.json | 15 ++ .../shaper_helixultimate/night.html.json | 92 ++++++++++ .../night.html.json.evidence.json | 15 ++ .../shaper_helixultimate/nxproof.php.json | 1 + .../nxproof.php.json.evidence.json | 15 ++ .../www/templates/system/links.db | 166 ++++++++++++++++++ .../templates/system/links.db.evidence.json | 15 ++ .../hosting/archlinexp.eu/www/tmp/cox.json | 1 + .../www/tmp/cox.json.evidence.json | 15 ++ var/www/hosting/archlinexp.eu/www/x9txt.json | 4 + .../www/x9txt.json.evidence.json | 15 ++ 36 files changed, 820 insertions(+) create mode 100644 var/www/hosting/archlinexp.eu/www/administrator/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/administrator/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/cache/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/cache/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/captain.json create mode 100644 var/www/hosting/archlinexp.eu/www/captain.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/images/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/images/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/maintht.json create mode 100644 var/www/hosting/archlinexp.eu/www/maintht.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/media/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/media/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/night.html.json create mode 100644 var/www/hosting/archlinexp.eu/www/night.html.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/nxproof.php.json create mode 100644 var/www/hosting/archlinexp.eu/www/nxproof.php.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/night.html.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/night.html.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/templates/system/links.db create mode 100644 var/www/hosting/archlinexp.eu/www/templates/system/links.db.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/tmp/cox.json create mode 100644 var/www/hosting/archlinexp.eu/www/tmp/cox.json.evidence.json create mode 100644 var/www/hosting/archlinexp.eu/www/x9txt.json create mode 100644 var/www/hosting/archlinexp.eu/www/x9txt.json.evidence.json diff --git a/var/www/hosting/archlinexp.eu/www/administrator/cox.json b/var/www/hosting/archlinexp.eu/www/administrator/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/administrator/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/administrator/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/administrator/cox.json.evidence.json new file mode 100644 index 0000000..21ceb10 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/administrator/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "5098", + "log_excerpt": "[quarantine] www.archlinexp.eu:administrator/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/administrator/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648994, + "size": 25, + "uid": 20043 + }, + "rel_path": "administrator/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/cache/cox.json b/var/www/hosting/archlinexp.eu/www/cache/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/cache/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/cache/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/cache/cox.json.evidence.json new file mode 100644 index 0000000..1305e36 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/cache/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "5021", + "log_excerpt": "[quarantine] www.archlinexp.eu:cache/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/cache/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783265637, + "size": 25, + "uid": 20043 + }, + "rel_path": "cache/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/captain.json b/var/www/hosting/archlinexp.eu/www/captain.json new file mode 100644 index 0000000..8cdbacb --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/captain.json @@ -0,0 +1 @@ +Hacked By CaptainSmok3r - t.me/CaptainSmok3r_official \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/captain.json.evidence.json b/var/www/hosting/archlinexp.eu/www/captain.json.evidence.json new file mode 100644 index 0000000..8ab0e5e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/captain.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4880", + "log_excerpt": "[quarantine] www.archlinexp.eu:captain.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/captain.json)", + "original_sha256": "1f43ac8f363075c7926d2ac1a30b8f94df9d913c1e5b68b5da30b5109f4bfc25", + "original_stat": { + "gid": 30037, + "mtime": 1783259268, + "size": 53, + "uid": 20043 + }, + "rel_path": "captain.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/cox.json b/var/www/hosting/archlinexp.eu/www/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/cox.json.evidence.json new file mode 100644 index 0000000..6be0672 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4863", + "log_excerpt": "[quarantine] www.archlinexp.eu:cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648985, + "size": 25, + "uid": 20043 + }, + "rel_path": "cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/images/cox.json b/var/www/hosting/archlinexp.eu/www/images/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/images/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/images/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/images/cox.json.evidence.json new file mode 100644 index 0000000..0426c5f --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/images/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "5162", + "log_excerpt": "[quarantine] www.archlinexp.eu:images/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/images/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648989, + "size": 25, + "uid": 20043 + }, + "rel_path": "images/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/maintht.json b/var/www/hosting/archlinexp.eu/www/maintht.json new file mode 100644 index 0000000..c1461a6 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/maintht.json @@ -0,0 +1,92 @@ + + + + + Hacked By TurkHackTeam + + + + + +
+ +
+
+ + TurkHackTeam + +
+
The site has been hacked by TURKHACKTEAM.
+
We whenever we want, wherever we want.
+
☪ Anka Red Team ☪
+
+ + + + + + + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/maintht.json.evidence.json b/var/www/hosting/archlinexp.eu/www/maintht.json.evidence.json new file mode 100644 index 0000000..8b36e77 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/maintht.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4881", + "log_excerpt": "[quarantine] www.archlinexp.eu:maintht.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/maintht.json)", + "original_sha256": "e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc", + "original_stat": { + "gid": 30037, + "mtime": 1783519684, + "size": 2786, + "uid": 20043 + }, + "rel_path": "maintht.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/media/cox.json b/var/www/hosting/archlinexp.eu/www/media/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/media/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/media/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/media/cox.json.evidence.json new file mode 100644 index 0000000..5769d45 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/media/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4990", + "log_excerpt": "[quarantine] www.archlinexp.eu:media/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/media/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648990, + "size": 25, + "uid": 20043 + }, + "rel_path": "media/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/night.html.json b/var/www/hosting/archlinexp.eu/www/night.html.json new file mode 100644 index 0000000..c1461a6 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/night.html.json @@ -0,0 +1,92 @@ + + + + + Hacked By TurkHackTeam + + + + + +
+ +
+
+ + TurkHackTeam + +
+
The site has been hacked by TURKHACKTEAM.
+
We whenever we want, wherever we want.
+
☪ Anka Red Team ☪
+
+ + + + + + + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/night.html.json.evidence.json b/var/www/hosting/archlinexp.eu/www/night.html.json.evidence.json new file mode 100644 index 0000000..a0d6432 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/night.html.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4870", + "log_excerpt": "[quarantine] www.archlinexp.eu:night.html.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/night.html.json)", + "original_sha256": "e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc", + "original_stat": { + "gid": 30037, + "mtime": 1783518338, + "size": 2786, + "uid": 20043 + }, + "rel_path": "night.html.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/nxproof.php.json b/var/www/hosting/archlinexp.eu/www/nxproof.php.json new file mode 100644 index 0000000..7477bbe --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/nxproof.php.json @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/nxproof.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/nxproof.php.json.evidence.json new file mode 100644 index 0000000..56630af --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/nxproof.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4943", + "log_excerpt": "[quarantine] www.archlinexp.eu:nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/nxproof.php.json)", + "original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07", + "original_stat": { + "gid": 30037, + "mtime": 1784114808, + "size": 33, + "uid": 20043 + }, + "rel_path": "nxproof.php.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/cox.json b/var/www/hosting/archlinexp.eu/www/templates/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/cox.json.evidence.json new file mode 100644 index 0000000..887ea68 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4951", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648993, + "size": 25, + "uid": 20043 + }, + "rel_path": "templates/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/night.html.json b/var/www/hosting/archlinexp.eu/www/templates/night.html.json new file mode 100644 index 0000000..c1461a6 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/night.html.json @@ -0,0 +1,92 @@ + + + + + Hacked By TurkHackTeam + + + + + +
+ +
+
+ + TurkHackTeam + +
+
The site has been hacked by TURKHACKTEAM.
+
We whenever we want, wherever we want.
+
☪ Anka Red Team ☪
+
+ + + + + + + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/night.html.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/night.html.json.evidence.json new file mode 100644 index 0000000..e44b13a --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/night.html.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4953", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/night.html.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/night.html.json)", + "original_sha256": "e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc", + "original_stat": { + "gid": 30037, + "mtime": 1783518338, + "size": 2786, + "uid": 20043 + }, + "rel_path": "templates/night.html.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json b/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json new file mode 100644 index 0000000..7477bbe --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json.evidence.json new file mode 100644 index 0000000..5a136e3 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4959", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/nxproof.php.json)", + "original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07", + "original_stat": { + "gid": 30037, + "mtime": 1784114811, + "size": 33, + "uid": 20043 + }, + "rel_path": "templates/nxproof.php.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json.evidence.json new file mode 100644 index 0000000..9821a8d --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4967", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/shaper_helixultimate/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648992, + "size": 25, + "uid": 20043 + }, + "rel_path": "templates/shaper_helixultimate/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json new file mode 100644 index 0000000..c1461a6 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json @@ -0,0 +1,92 @@ + + + + + Hacked By TurkHackTeam + + + + + +
+ +
+
+ + TurkHackTeam + +
+
The site has been hacked by TURKHACKTEAM.
+
We whenever we want, wherever we want.
+
☪ Anka Red Team ☪
+
+ + + + + + + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json.evidence.json new file mode 100644 index 0000000..e6b94bd --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4968", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/shaper_helixultimate/night.html.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/night.html.json)", + "original_sha256": "e5035e6120f1efc7d81ebf47b5e1a72f235b68c8c968dc330fcd6decab78a9bc", + "original_stat": { + "gid": 30037, + "mtime": 1783518339, + "size": 2786, + "uid": 20043 + }, + "rel_path": "templates/shaper_helixultimate/night.html.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json new file mode 100644 index 0000000..7477bbe --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json.evidence.json new file mode 100644 index 0000000..1d7be40 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4973", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/shaper_helixultimate/nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/shaper_helixultimate/nxproof.php.json)", + "original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07", + "original_stat": { + "gid": 30037, + "mtime": 1784114812, + "size": 33, + "uid": 20043 + }, + "rel_path": "templates/shaper_helixultimate/nxproof.php.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/templates/system/links.db b/var/www/hosting/archlinexp.eu/www/templates/system/links.db new file mode 100644 index 0000000..8eb5403 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/system/links.db @@ -0,0 +1,166 @@ +a:35:{s:18:"__sape_delimiter__";s:2:". ";s:16:"__sape_teasers__";a:0:{}s:12:"__for_user__";s:32:"04467c8a028c7ca6bdd5a9edca72cd00";s:12:"__for_host__";s:20:"http://archlinexp.eu";s:31:"__sape_page_obligatory_output__";s:290:"";s:27:"__sape_teaser_images_path__";s:8:"img.php?";s:64:"/produktuebersicht/blog/21-plaene-eines-wohnparks-in-keszthely-2";a:1:{i:0;s:93:" Lagercontainer mieten alt-hamborn duisburg. ";}s:65:"/produktuebersicht/blog/21-plaene-eines-wohnparks-in-keszthely-2/";a:1:{i:0;s:93:" Lagercontainer mieten alt-hamborn duisburg. ";}s:4:"/buy";a:1:{i:0;s:192:" What are the secrets of slot machines that only the casinos or creators know? ";}s:5:"/buy/";a:1:{i:0;s:192:" What are the secrets of slot machines that only the casinos or creators know? ";}s:31:"/produktuebersicht/blog?start=5";a:1:{i:0;s:141:" Watch online free 1911 film in HD 1080. ";}s:32:"/produktuebersicht/blog?start=5/";a:1:{i:0;s:141:" Watch online free 1911 film in HD 1080. ";}s:32:"/produktuebersicht/blog/23-villa";a:1:{i:0;s:175:" Watch online free 1911 movie in HD. ";}s:33:"/produktuebersicht/blog/23-villa/";a:1:{i:0;s:175:" Watch online free 1911 movie in HD. ";}s:55:"/produktuebersicht/blog/34-archline-xp-einfach-loslegen";a:1:{i:0;s:101:" https://www.custream.com/poker-hud ";}s:56:"/produktuebersicht/blog/34-archline-xp-einfach-loslegen/";a:1:{i:0;s:101:" https://www.custream.com/poker-hud ";}s:15:"/privacy-policy";a:1:{i:0;s:147:" best 10 accounting homework help ";}s:16:"/privacy-policy/";a:1:{i:0;s:147:" best 10 accounting homework help ";}s:1:"/";a:1:{i:0;s:92:" sg escort according to an escort ";}s:77:"/produktuebersicht/blog/30-ferienhaus-auf-patmos-archilab-studio-griechenland";a:1:{i:0;s:61:" bbbc19.com ";}s:78:"/produktuebersicht/blog/30-ferienhaus-auf-patmos-archilab-studio-griechenland/";a:1:{i:0;s:61:" bbbc19.com ";}s:24:"__sape_show_only_block__";b:0;s:18:"__sape_block_tpl__";a:3:{s:3:"css";s:2156:"";i:1;a:3:{s:5:"block";s:88:"";s:14:"item_container";s:68:" {item} ";s:4:"item";s:209:" ";}i:0;a:3:{s:5:"block";s:71:"";s:14:"item_container";s:54:"";s:4:"item";s:209:" ";}}s:26:"__sape_block_tpl_options__";a:2:{s:17:"block_orientation";i:1;s:12:"block_no_css";i:0;}s:23:"__sape_block_uri_idna__";a:0:{}s:20:"__sape_teasers_css__";s:5363:"";s:16:"__sape_new_url__";s:20:"";s:26:"__sape_new_teasers_block__";s:21:"";s:16:"__sape_charset__";s:5:"utf-8";s:15:"__last_update__";i:1652191060;s:14:"__multi_site__";b:0;s:21:"__fetch_remote_type__";s:17:"file_get_contents";s:15:"__ignore_case__";b:0;s:15:"__php_version__";s:38:"5.6.40-57+ubuntu18.04.1+deb.sury.org+1";s:19:"__server_software__";s:22:"Apache/2.4.53 (Ubuntu)";} \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/templates/system/links.db.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/system/links.db.evidence.json new file mode 100644 index 0000000..18983f5 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/templates/system/links.db.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4960", + "log_excerpt": "[quarantine] www.archlinexp.eu:templates/system/links.db -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/system/links.db)", + "original_sha256": "5bade5d7cd10376ddaf7992d905e39cb055a14210ddeb76116b230974ad6d3be", + "original_stat": { + "gid": 30037, + "mtime": 1652191060, + "size": 12495, + "uid": 20043 + }, + "rel_path": "templates/system/links.db", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/tmp/cox.json b/var/www/hosting/archlinexp.eu/www/tmp/cox.json new file mode 100644 index 0000000..35e140e --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/tmp/cox.json @@ -0,0 +1 @@ +hacked by trenggalek6etar \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/tmp/cox.json.evidence.json b/var/www/hosting/archlinexp.eu/www/tmp/cox.json.evidence.json new file mode 100644 index 0000000..59d4c98 --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/tmp/cox.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "5222", + "log_excerpt": "[quarantine] www.archlinexp.eu:tmp/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/tmp/cox.json)", + "original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582", + "original_stat": { + "gid": 30037, + "mtime": 1783648991, + "size": 25, + "uid": 20043 + }, + "rel_path": "tmp/cox.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +} diff --git a/var/www/hosting/archlinexp.eu/www/x9txt.json b/var/www/hosting/archlinexp.eu/www/x9txt.json new file mode 100644 index 0000000..c73a7fd --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/x9txt.json @@ -0,0 +1,4 @@ +Hacked By X9 +

Hacked By X9

+

HCCTEAM.org | t.me/ExpSX9

+ \ No newline at end of file diff --git a/var/www/hosting/archlinexp.eu/www/x9txt.json.evidence.json b/var/www/hosting/archlinexp.eu/www/x9txt.json.evidence.json new file mode 100644 index 0000000..2e0200c --- /dev/null +++ b/var/www/hosting/archlinexp.eu/www/x9txt.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4871", + "log_excerpt": "[quarantine] www.archlinexp.eu:x9txt.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/x9txt.json)", + "original_sha256": "35a68c9a692d1d2fc59a7a6e9f4d686c97ec377515e1928af21a982a34e96d7b", + "original_stat": { + "gid": 30037, + "mtime": 1783286480, + "size": 141, + "uid": 20043 + }, + "rel_path": "x9txt.json", + "result": "quarantined", + "timestamp": "20260718T155031Z", + "vhost": "www.archlinexp.eu" +}