HEX
Server: LiteSpeed
System: Linux sh-woe014 4.18.0-553.146.1.el8_10.x86_64 #1 SMP Tue Jul 21 03:06:01 EDT 2026 x86_64
User: museumof (2332)
PHP: 8.3.31
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/museumof/Maildir/new/1785293956.M437374P2285023.sh-woe014.hostslim.nl
Return-path: <>
Envelope-to: museumof@museumofcinema.com
Delivery-date: Wed, 29 Jul 2026 04:59:16 +0200
Received: from mail by sh-woe014.hostslim.nl with local (Exim 4.99.5)
	id 1wouVo-00000009aQw-1bDj
	for museumof@museumofcinema.com;
	Wed, 29 Jul 2026 04:59:16 +0200
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@sh-woe014.hostslim.nl>
To: museumof@museumofcinema.com
References: <E1wnEwu-0000000GmeZ-0vDc@sh-woe014.hostslim.nl>
Content-Type: multipart/report; report-type=delivery-status; boundary=1785293956-eximdsn-519793239
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1wouVo-00000009aQw-1bDj@sh-woe014.hostslim.nl>
Date: Wed, 29 Jul 2026 04:59:16 +0200

--1785293956-eximdsn-519793239
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  loggershell443@gmail.com
    host alt2.gmail-smtp-in.l.google.com [172.253.148.27]
    SMTP error from remote mail server after end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [museumofcinema.com] with ip: [103.214.6.202] = did not pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication a640c23a62f3a-c1f843e9befsi122277566b.276 - gsmtp

--1785293956-eximdsn-519793239
Content-type: message/delivery-status

Reporting-MTA: dns; sh-woe014.hostslim.nl

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; alt2.gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [museumofcinema.com] with ip: [103.214.6.202] = did not pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication a640c23a62f3a-c1f843e9befsi122277566b.276 - gsmtp

--1785293956-eximdsn-519793239
Content-type: message/rfc822

Return-path: <museumof@museumofcinema.com>
Received: from museumof by sh-woe014.hostslim.nl with local (Exim 4.99.5)
	(envelope-from <museumof@museumofcinema.com>)
	id 1wnEwu-0000000GmeZ-0vDc
	for loggershell443@gmail.com;
	Fri, 24 Jul 2026 14:24:20 +0200
To: loggershell443@gmail.com
Subject: Logged Shell Yanz
X-PHP-Originating-Script: 2332:byte.php(82) : eval()'d code(6) : eval()'d code(2) : eval()'d code(1) : eval()'d code(1) : eval()'d code(528) : eval()'d code
Message-Id: <E1wnEwu-0000000GmeZ-0vDc@sh-woe014.hostslim.nl>
From: museumof@museumofcinema.com
Date: Fri, 24 Jul 2026 14:24:20 +0200

[ 156.254.126.126 ]

Logged Shell http://emei-landarms.com/wp-content/plugins/nx_up_a8725b6f/byte.php Yanz Password () SpawnedShell 
https://emei-landarms.com/wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Plugin/Cookie/about.php	https://emei-landarms.com/wp-content/plugins/updraftplus/vendor/guzzle/guzzle/src/Guzzle/Plugin/Cookie/about.PHP	 *IP Address : [ 156.254.126.126 ]

--1785293956-eximdsn-519793239--