Encryption

PHP Version

8.1.31

Cryptor

OpenSSL

Default Cipher

aes-256-cbc

mb_internal_encoding

UTF-8

IP Validation

$headers from get_ip()

Array
(
    [Host] => cursana.com.br
    [cf-ray] => 90a7da1d6e6aceb8-ORD
    [cf-connecting-ip] => 184.154.76.42
    [User-Agent] => SiteLock (Module: SmartDB; Source: https://www.sitelock.com/; Version: 1.0)
    [Accept-Encoding] => gzip, br
    [cdn-loop] => cloudflare; loops=1
    [cf-ipcountry] => US
    [cf-visitor] => {"scheme":"https"}
    [X-Forwarded-For] => 184.154.76.42
    [x-forwarded-proto] => https
    [x-https] => on
)

IP Check started in

/home/webbhlvw/cursana.com.br/tmp/9b752c9e98a057c1d5182804c81c440f.php

IP Check started at

2025-01-31T02:05:12-05:00

The following IPs will be tested

Array
(
    [0] => 184.154.76.42
)

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => 9bf***
    [requests] => Array
        (
            [id] => 66cb6758fe2f89967a3e6174b8df9915-17383071127024
            [action] => validate_ip
            [params] => Array
                (
                    [site_id] => 43135503
                    [ip] => 184.154.76.42
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 766
    [request_size] => 462
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 0.312235
    [namelookup_time] => 0.000275
    [connect_time] => 0.03709
    [pretransfer_time] => 0.076655
    [size_upload] => 324
    [size_download] => 510
    [speed_download] => 1633
    [speed_upload] => 1037
    [download_content_length] => -1
    [upload_content_length] => 324
    [starttransfer_time] => 0.312082
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 192.64.117.65
    [local_port] => 35202
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => https
    [appconnect_time_us] => 76559
    [connect_time_us] => 37090
    [namelookup_time_us] => 275
    [pretransfer_time_us] => 76655
    [redirect_time_us] => 0
    [starttransfer_time_us] => 312082
    [total_time_us] => 312235
)

mapi_response

{"apiVersion":"3.0.1","status":"ok","globalResponse":null,"banner":null,"forceLogout":false,"newToken":null,"now":1738307112,"responses":[{"id":"66cb6758fe2f89967a3e6174b8df9915-17383071127024","data":{"ip_address":"184.154.76.42","valid":true},"raw_api_url":"https:\/\/api.sitelock.com\/v1\/9bf***\/dbscan\/checkip","raw_response":{"@attributes":{"version":"1.1","encoding":"UTF-8"},"checkIP":{"status":"1"}},"raw_request":{"site_id":"43135503","ip":"184.154.76.42"},"status":"ok"}]}

Ifsnop\Mysqldump is loaded into memory.

BackupGrabAndZip

_POST

Array
(
)

_GET (raw)

cmd=db_creds_ready&enc_db_creds=IV6yQ9%2BpaF86rUw7vK%2Folgno6KFTCVt5buY8nt7bgpG%2FyvHhuyFX3%2Bf196YMTxdqOw6gN0KP0blxt8%2BzXnuD6Qu9GJ0ETTDlaYJ4m1ashieWQzgWC4zeF75RnZjvTij1SzayRLX8hvPTz9NIOdfnjA%3D%3D&smart_single_download_id=5255655

Detected memory_limit

1024M

Chunk Size

10485760

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => 9bf***
    [requests] => Array
        (
            [id] => f8f6f31982af29037dada2d7cff0c487-17383071130153
            [action] => s3_get_enc_info
            [params] => Array
                (
                    [site_id] => 43135503
                    [queue_id] => 5255655
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 770
    [request_size] => 466
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 1.348856
    [namelookup_time] => 0.005851
    [connect_time] => 0.042924
    [pretransfer_time] => 0.083278
    [size_upload] => 328
    [size_download] => 817
    [speed_download] => 605
    [speed_upload] => 243
    [download_content_length] => -1
    [upload_content_length] => 328
    [starttransfer_time] => 1.348744
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 192.64.117.65
    [local_port] => 35210
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => https
    [appconnect_time_us] => 83171
    [connect_time_us] => 42924
    [namelookup_time_us] => 5851
    [pretransfer_time_us] => 83278
    [redirect_time_us] => 0
    [starttransfer_time_us] => 1348744
    [total_time_us] => 1348856
)

Received encryption details

Array
(
    [cipher] => aes-256-cbc
    [key] => wJ1***
    [iv] => J1z***
)

get_bullet_lock_path:

/home/webbhlvw/cursana.com.br/tmp/9b752c9e98a057c1d5182804c81c440f.php.lock

bullet_is_locked check:

not locked (no lock file)

get_bullet_lock_path:

/home/webbhlvw/cursana.com.br/tmp/9b752c9e98a057c1d5182804c81c440f.php.lock

lock_the_bullet: bytes written

Starting MySQLi constructor

$_SCHEMAS received

["cptmpdb_webbhlvw_CdJNsHxNZBR38ICE","webbhlvw_backup","webbhlvw_caixa","webbhlvw_cursana-com-br","webbhlvw_cursanacombr","webbhlvw_cursananet","webbhlvw_db893","webbhlvw_homexadvisor","webbhlvw_novo","webbhlvw_wp120","webbhlvw_wp1201","webbhlvw_wp140","webbhlvw_wp164","webbhlvw_wp19","webbhlvw_wp250","webbhlvw_wp270","webbhlvw_wp292","webbhlvw_wp306","webbhlvw_wp376","webbhlvw_wp393","webbhlvw_wp396","webbhlvw_wp4","webbhlvw_wp452","webbhlvw_wp466","webbhlvw_wp470","webbhlvw_wp479","webbhlvw_wp485","webbhlvw_wp499","webbhlvw_wp523","webbhlvw_wp551","webbhlvw_wp595","webbhlvw_wp636","webbhlvw_wp689","webbhlvw_wp733","webbhlvw_wp763","webbhlvw_wp788","webbhlvw_wp815","webbhlvw_wp82","webbhlvw_wp878","webbhlvw_wp912","webbhlvw_wp936","webbhlvw_wphostingsreviews"]

Attempted to setlocale() with UTF-8

Success

establish_mysql_version()

mysql  Ver 15.1 Distrib 10.6.20-MariaDB, for Linux (x86_64) using readline 5.1

Trying sed.

 | /bin/sed -r -e 's/DEFINER=`[^`]+`@`[^`]+`//'

/bin/mysqldump Version

mysqldump  Ver 10.19 Distrib 10.6.20-MariaDB, for Linux (x86_64)

mysqldump: success

/bin/mysqldump --defaults-file=/tmp/sl-mysqldumpbJ0FdJ -hbusiness133.web-hosting.com  --quick --compact --skip-comments --events --routines --create-options --add-drop-table --add-drop-trigger --force --no-tablespaces --databases 'cptmpdb_webbhlvw_CdJNsHxNZBR38ICE' 'webbhlvw_backup' 'webbhlvw_caixa' 'webbhlvw_cursana-com-br' 'webbhlvw_cursanacombr' 'webbhlvw_cursananet' 'webbhlvw_db893' 'webbhlvw_homexadvisor' 'webbhlvw_novo' 'webbhlvw_wp120' 'webbhlvw_wp1201' 'webbhlvw_wp140' 'webbhlvw_wp164' 'webbhlvw_wp19' 'webbhlvw_wp250' 'webbhlvw_wp270' 'webbhlvw_wp292' 'webbhlvw_wp306' 'webbhlvw_wp376' 'webbhlvw_wp393' 'webbhlvw_wp396' 'webbhlvw_wp4' 'webbhlvw_wp452' 'webbhlvw_wp466' 'webbhlvw_wp470' 'webbhlvw_wp479' 'webbhlvw_wp485' 'webbhlvw_wp499' 'webbhlvw_wp523' 'webbhlvw_wp551' 'webbhlvw_wp595' 'webbhlvw_wp636' 'webbhlvw_wp689' 'webbhlvw_wp733' 'webbhlvw_wp763' 'webbhlvw_wp788' 'webbhlvw_wp815' 'webbhlvw_wp82' 'webbhlvw_wp878' 'webbhlvw_wp912' 'webbhlvw_wp936' 'webbhlvw_wphostingsreviews'  | /bin/sed -r -e 's/DEFINER=`[^`]+`@`[^`]+`//'  | zip -jqm1 ./.6f44d1a73e53ef71e815f25c2582ec7a/everything.sql.zip -

zipnote: success

zipnote -w ./.6f44d1a73e53ef71e815f25c2582ec7a/everything.sql.zip <<<$'@ -
@=database_backup.sql'

Original ZIP size

1761699269

Encoded chunks written

wrap_up_the_backup with status ok

Returned technical error details, if any

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => 9bf***
    [requests] => Array
        (
            [id] => af7afa9052d6cdb1688842a1326ba52a-17383075961905
            [action] => s3_queue
            [params] => Array
                (
                    [site_id] => 43135503
                    [queue_id] => 5255655
                    [client_id] => 2416
                    [feature_code] => backup_db
                    [status] => ok
                    [url] => ./.6f44d1a73e53ef71e815f25c2582ec7a/everything.sql.zip
                    [zip_file_info] => ./.6f44d1a73e53ef71e815f25c2582ec7a/everything.sql.zip-descriptor
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 768
    [request_size] => 738
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 4.525584
    [namelookup_time] => 0.070113
    [connect_time] => 0.107274
    [pretransfer_time] => 0.147667
    [size_upload] => 600
    [size_download] => 734
    [speed_download] => 162
    [speed_upload] => 132
    [download_content_length] => -1
    [upload_content_length] => 600
    [starttransfer_time] => 4.52554
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 192.64.117.65
    [local_port] => 45074
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => https
    [appconnect_time_us] => 147255
    [connect_time_us] => 107274
    [namelookup_time_us] => 70113
    [pretransfer_time_us] => 147667
    [redirect_time_us] => 0
    [starttransfer_time_us] => 4525540
    [total_time_us] => 4525584
)

mapi_response

{"apiVersion":"3.0.1","status":"ok","globalResponse":null,"banner":null,"forceLogout":false,"newToken":null,"now":1738307600,"responses":[{"id":"af7afa9052d6cdb1688842a1326ba52a-17383075961905","data":{"s3_status":"ok","queue_id":""},"raw_api_url":"https:\/\/api.sitelock.com\/v1\/9bf***\/backup\/queue","raw_response":{"@attributes":{"version":"1.1","encoding":"UTF-8"},"backup_db":{"message":"OK","status":"ok"}},"raw_request":"<xml>\n  <backup_db site_id=\"43135503\" queue_id=\"5255655\" url=\".\/.6f44d1a73e53ef71e815f25c2582ec7a\/everything.sql.zip\" status=\"ok\" zip_file_info=\".\/.6f44d1a73e53ef71e815f25c2582ec7a\/everything.sql.zip-descriptor\" backup_db_id=\"2416\"\/>\n<\/xml>","status":"ok"}]}

get_bullet_lock_path:

/home/webbhlvw/cursana.com.br/tmp/9b752c9e98a057c1d5182804c81c440f.php.lock

unlock_the_bullet: status

success

delete_unique_directory - unlink( $descriptor_file[0] );

/home/webbhlvw/cursana.com.br/tmp/.d55f26a542c2b1f71f59cafd2823adfa/everything.sql.zip-descriptor