HEX

File: /home/predezso/mail/new/1749385522.M258558P2542355.premium267.web-hosting.com,S=6638,W=6805
Envelope-to: [email protected]
Delivery-date: Sun, 08 Jun 2025 08:25:22 -0400
Auto-Submitted: auto-replied
From: Mail Delivery System <[email protected]>
To: [email protected]
References: <[email protected]>
Content-Type: multipart/report; report-type=delivery-status; boundary=1749385521-eximdsn-1394245874
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <[email protected]>
Date: Sun, 08 Jun 2025 08:25:21 -0400

--1749385521-eximdsn-1394245874
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  [email protected]
    host gmail-smtp-in.l.google.com [142.250.113.27]
    SMTP error from remote mail server after end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [premium267.web-hosting.com] with ip:
    [69.57.162.29] = did not
    550-5.7.26 pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication 46e09a7af769-73889f57968si3044935a34.3 - gsmtp

--1749385521-eximdsn-1394245874
Content-type: message/delivery-status

Reporting-MTA: dns; premium267.web-hosting.com

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [premium267.web-hosting.com] with ip: [69.57.162.29] = did not
 550-5.7.26 pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication 46e09a7af769-73889f57968si3044935a34.3 - gsmtp

--1749385521-eximdsn-1394245874
Content-type: message/rfc822

Return-path: <[email protected]>
Received: from predezso by premium267.web-hosting.com with local (Exim 4.98.2)
	(envelope-from <[email protected]>)
	id 1uOF5T-0000000BBao-12hN
	for [email protected];
	Sun, 08 Jun 2025 08:25:19 -0400
To: [email protected]
Subject: =?us-ascii?Q?[Wordfence_Alert]_Problems_found_on_buktijpgemp?=
 =?us-ascii?Q?atoto.com?=
Date: Sun, 8 Jun 2025 12:25:18 +0000
From: WordPress <[email protected]>
Message-ID: <[email protected]>
X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Sender:  <[email protected]>

<p>This email was sent from your website &quot;BUKTI JP GEMPATOTO&quot; by the Wordfence plugin.</p>

<p>Wordfence found the following new issues on &quot;BUKTI JP GEMPATOTO&quot;.</p>

<p>Alert generated at Sunday 8th of June 2025 at 12:25:18 PM</p>

<br>

<p>See the details of these scan results on your site at: https://buktijpgempatoto.com/wp-admin/admin.php?page=WordfenceScan</p>




<p>Critical Problems:</p>
<p>* File appears to be malicious or unsafe: wp-content/themes/hexx.php</p>


<p>* File appears to be malicious or unsafe: wp-content/zadib/porecolun/hexx.php</p>


<p>* File appears to be malicious or unsafe: comment.php</p>


<p>* File appears to be malicious or unsafe: index.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/ID3/hexx.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/fahokuvu/vumobitaw/files.php</p>


<p>* File appears to be malicious or unsafe: wp-admin/qoxexicuha/saqiled/yazaz.php</p>


<p>High Severity Problems:</p>
<p>* Unknown file in WordPress core: wp-admin/ID3/hexx.php</p>


<p>* Unknown file in WordPress core: wp-admin/fahokuvu/vumobitaw/files.php</p>


<p>* Unknown file in WordPress core: wp-admin/qoxexicuha/saqiled/yazaz.php</p>


<p>* Unknown file in WordPress core: wp-admin/qoxexicuha/saqiled/yazaz.zip</p>


<p>* WordPress core file modified: index.php</p>


<p>Medium Severity Problems:</p>
<p>* The Plugin &quot;Protect uploads&quot; appears to be abandoned (updated September 4, 2022, tested to WP 6.0.9).</p>
<p>https://wordpress.org/plugins/protect-uploads/#developers</p>

<p>Low Severity Problems:</p>
<p>* 1 path was skipped for the malware scan due to scan settings</p>
<p>Scanning additional paths is optional and is not always necessary. <a href="https://www.wordfence.com/help/?query=scan-result-skipped-paths" target="_blank" rel="nofollow noreferrer noopener">Learn More</a></p>



	<p>NOTE: You are using the free version of Wordfence. Upgrade today:</p>
	
	<ul>
		<li>Receive real-time Firewall and Scan engine rule updates for protection as threats emerge</li>
		<li>Real-time IP Blocklist blocks the most malicious IPs from accessing your site</li>
		<li>Country blocking</li>
		<li>IP reputation monitoring</li>
		<li>Schedule scans to run more frequently and at optimal times</li>
		<li>Access to Premium Support</li>
		<li>Discounts for multi-year and multi-license purchases</li>
	</ul>

	<p>Click here to upgrade to Wordfence Premium:<br><a href="https://www.wordfence.com/zz2/wordfence-signup/">https://www.wordfence.com/zz2/wordfence-signup/</a></p>

<p>No longer an administrator for this site? <a href="https://buktijpgempatoto.com/?_wfsf=removeAlertEmail&amp;jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImJzdG1lZHVzYXNlb0BnbWFpbC5jb20iLCJfZXhwIjoxNzQ5OTkwMzE4fQ.10h3HDuCoj_V1SXmmrLAeEJpME2Y0bjskQ6fY4lCdcw" target="_blank">Click here</a> to stop receiving security alerts.</p>


--1749385521-eximdsn-1394245874--