Da

✏️ Editing: 1770154802.M876903P3837420.premium309.web-hosting.com,S=3114,W=3175

Envelope-to: amora@sapasequipment.com
Delivery-date: Tue, 03 Feb 2026 16:40:02 -0500
To: amora@sapasequipment.com
From: noreply@namecheaphosting.com
Reply-To: noreply@namecheaphosting.com
Subject: Attention: Malicious Attempt to Access Your Hosting Account "sapaqddr" is Detected
Date: Tue, 3 Feb 2026 16:40:02 -0500
Message-ID: <20260203_214002_017182.root@premium309.web-hosting.com>

Dear Hosting Account 'sapaqddr' Owner,

This is an automated alert to inform you that we have detected a malicious attempt to access your account via http or ftp on our server 'premium309.web-hosting.com'. 
Our security systems have blocked the upload of malicious file to the server and put it to the quarantine. Your website is safe now, but it is important 
you undertake the following precautions.

1. Immediately scan your PC for viruses and malware. We recommend the anti-virus programs which free editions are available 
     for most operating systems for this purpose.

2. Make sure that you use strong, hard-to-guess passwords on your account and applications. Do not use the same password for 
     different applications. To remember more difficult passwords, we recommend you use the password managers such as LastPass or RoboForm.

3. Update all third party scripts to the latest versions (e.g. Joomla, WordPress, Magentoo or any other CMS). Remove every script, gadget, 
     feature, function, and code snippet which has poor security vulnerability report.

4. Use .htaccess or cPanel > Deny IP to block the hacker's HTTP access to your site. If you identified the hacker's IP address, one site where you 
     can look it up to get more information about this IP is http://whois.domaintools.com/ .

5. Change your cPanel/ftp passwords.

We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and 
your file is false-positive (innocent), please submit a ticket to us at https://support.namecheap.com/index.php?/Tickets/Submit or contact 
the Live Help at http://www.namecheap.com/support/livesupport.aspx and we will be happy to assist:

'[Fingerprint Match (md5)] [PHP Shell Exploit]':    /home/sapaqddr/public_html/wp-content-20260203211157/wflogs/150600/953157/index.php

--
  Regards,
  NameCheap Hosting Team

📁 Sid Gifari File Manager