/home/bdqbpbxa/mail/new/1751374524.M958821P9694.server94.goodface.com.ua,S=4731,W=4822
Return-Path: <>
Delivered-To: bdqbpbxa@server94.goodface.com.ua
Received: from server94.goodface.com.ua
	by server94.goodface.com.ua with LMTP
	id aOoFObzaY2jeJQAAzlz2UA
	(envelope-from <>)
	for <bdqbpbxa@server94.goodface.com.ua>; Tue, 01 Jul 2025 08:55:24 -0400
Return-path: <>
Envelope-to: bdqbpbxa@server94.goodface.com.ua
Delivery-date: Tue, 01 Jul 2025 08:55:24 -0400
Received: from mailnull by server94.goodface.com.ua with local (Exim 4.96.2)
	id 1uWaWC-0002hF-2p
	for bdqbpbxa@server94.goodface.com.ua;
	Tue, 01 Jul 2025 08:55:24 -0400
X-Failed-Recipients: loggershell443@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@server94.goodface.com.ua>
To: bdqbpbxa@server94.goodface.com.ua
References: <E1uWaNg-00069R-0I@server94.goodface.com.ua>
Content-Type: multipart/report; report-type=delivery-status; boundary=1751374524-eximdsn-172549944
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uWaWC-0002hF-2p@server94.goodface.com.ua>
Date: Tue, 01 Jul 2025 08:55:24 -0400

--1751374524-eximdsn-172549944
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  loggershell443@gmail.com
    host gmail-smtp-in.l.google.com [74.125.131.26]
    SMTP error from remote mail server after end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [server94.goodface.com.ua] with ip:
    [185.156.42.209] = did not
    550-5.7.26 pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication 38308e7fff4ca-32cdac75bd7si33839021fa.492 - gsmtp

--1751374524-eximdsn-172549944
Content-type: message/delivery-status

Reporting-MTA: dns; server94.goodface.com.ua

Action: failed
Final-Recipient: rfc822;loggershell443@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the sender is unauthenticated.
 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
 550-5.7.26
 550-5.7.26  Authentication results:
 550-5.7.26  DKIM = did not pass
 550-5.7.26  SPF [server94.goodface.com.ua] with ip: [185.156.42.209] = did not
 550-5.7.26 pass
 550-5.7.26
 550-5.7.26  For instructions on setting up authentication, go to
 550 5.7.26  https://support.google.com/mail/answer/81126#authentication 38308e7fff4ca-32cdac75bd7si33839021fa.492 - gsmtp

--1751374524-eximdsn-172549944
Content-type: message/rfc822

Return-path: <bdqbpbxa@server94.goodface.com.ua>
Received: from bdqbpbxa by server94.goodface.com.ua with local (Exim 4.96.2)
	(envelope-from <bdqbpbxa@server94.goodface.com.ua>)
	id 1uWaNg-00069R-0I
	for loggershell443@gmail.com;
	Tue, 01 Jul 2025 08:46:36 -0400
To: loggershell443@gmail.com
Subject: Logged Shell Lokal
X-PHP-Script: freedom-fund-dev.goodface.com.ua/wp-content/plugins/all-in-one-seo-pack/vendor/woocommerce/action-scheduler/lib/alfa-rex.php for 20.171.207.60, 20.171.207.60
 X-PHP-Originating-Script: 1001:php3Mf7Ad(2) : eval()'d code
Message-Id: <E1uWaNg-00069R-0I@server94.goodface.com.ua>
From: bdqbpbxa@server94.goodface.com.ua
Date: Tue, 01 Jul 2025 08:46:36 -0400

[ 20.171.207.60 ]

Logged Shell http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/all-in-one-seo-pack/vendor/woocommerce/action-scheduler/lib/alfa-rex.php Yanz Password () SpawnedShell 
http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/about.php	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/about.php7	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/wp-login.php	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/alfa-rex.php7	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/alfa-rex.php56	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/alfa-rex.php8	http://freedom-fund-dev.goodface.com.ua/wp-content/plugins/alpha/public/vendors/split/packages/react-split/src/alfa-rex.php	 *IP Address : [ 20.171.207.60 ]

--1751374524-eximdsn-172549944--
Path: home/bdqbpbxa/mail/new