Wizard Assistant Toolkit

The domain's CNAME Record is not using Cloudflare.

The domain's is using Cloudflare's Nameservers aka FullZone

The domain is not pointed to WizardAssistant.

The domain's MX Record is not pointed to WizardAssistant.

Dig DNS check Internal Use Only
DNS information for wizardassistant.com
https://whois.domaintools.com/wizardassistant.com
http://leafdns.com/index.cgi?name=wizardassistant.com
https://intodns.com/wizardassistant.com
https://www.whatsmydns.net/#A/wizardassistant.com
SPF Link check
https://mxtoolbox.com/SuperTool.aspx?action=spf%3awizardassistant.com&run=networktools
DKIM lookup for cPanel based domains using "default" selector
https://mxtoolbox.com/SuperTool.aspx?action=dkim%3awizardassistant.com%3adefault&run=toolpage
PTR/Rdns checks for Domain and MX IP's
https://mxtoolbox.com/SuperTool.aspx?action=ptr%3a172.67.151.135&run=networktools
https://mxtoolbox.com/SuperTool.aspx?action=ptr%3a66.42.124.10&run=networktools
SSL checks
https://www.sslshopper.com/ssl-checker.html#hostname=wizardassistant.com
https://www.ssllabs.com/ssltest/analyze.html?d=wizardassistant.com
MX Blacklist Link checks for MX record and MX Record IP
https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3azimbra.wizardassistant.com&run=networktools
https://talosintelligence.com/reputation_center/lookup?search=zimbra.wizardassistant.com
http://multirbl.valli.org/lookup/zimbra.wizardassistant.com.html
https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a66.42.124.10&run=networktools
https://talosintelligence.com/reputation_center/lookup?search=66.42.124.10
http://multirbl.valli.org/lookup/66.42.124.10.html
DNS History for wizardassistant.com
https://securitytrails.com/domain/wizardassistant.com
IP History for Domain IP172.67.151.135
https://securitytrails.com/list/ip/172.67.151.135
IP History for MX Record IP 66.42.124.10
https://securitytrails.com/list/ip/66.42.124.10
Intelligence IBM History for wizardassistant.com
https://exchange.xforce.ibmcloud.com/url/wizardassistant.com
Intelligence IBM History for Domain IP 172.67.151.135
https://exchange.xforce.ibmcloud.com/ip/172.67.151.135
Intelligence IBM History for MX Record IP 66.42.124.10
https://exchange.xforce.ibmcloud.com/ip/66.42.124.10
Sucuri SiteCheck for domain wizardassistant.com
https://sitecheck.sucuri.net/results/wizardassistant.com
Norton Safeweb SiteCheck for domain wizardassistant.com
https://safeweb.norton.com/report/show?url=wizardassistant.com
Google Safe Browsing Check for domain wizardassistant.com
https://transparencyreport.google.com/safe-browsing/search?url=wizardassistant.com

DNS Snapshot from March 25, 2023 05:22:40 PM for wizardassistant.com

Name	Class	TTL	Type	Value
wizardassistant.com	IN	279	A	172.67.151.135
wizardassistant.com	IN	279	A	104.21.90.25
wizardassistant.com	IN	86400	NS	anuj.ns.cloudflare.com
wizardassistant.com	IN	86400	NS	mariah.ns.cloudflare.com
wizardassistant.com	IN	3600	SOA	anuj.ns.cloudflare.com	dns.cloudflare.com	2303397919	10000	2400	604800	3600
wizardassistant.com	IN	300	MX	0	zimbra.wizardassistant.com
wizardassistant.com	IN	300	MX	10	mail.wizardassistant.com
wizardassistant.com	IN	300	TXT	google-site-verification=51aixBn6TPu7ED8aN4LYkpjGFuOSUj4RtYEB8kJ5ioc	Array
wizardassistant.com	IN	300	TXT	keybase-site-verification=P2Dq45QgLPf7RtmOoHDMYEhHnPKlGgM9sGaO6Xc6qRw	Array
wizardassistant.com	IN	300	TXT	v=spf1 mx a ip4:144.202.58.32 ip4:66.42.124.10 a:zimbra.wizardassistant.com -all	Array
wizardassistant.com	IN	300	AAAA	2606:4700:3031::6815:5a19
wizardassistant.com	IN	300	AAAA	2606:4700:3034::ac43:9787

PTR/Rdns Domain A Record	172.67.151.135
MX Record IP	66.42.124.10
PTR/RDNs MX Record	zimbra.hackerdise.me

Search login logs for [email protected] Shows IMAP, POP login attempts, transactions, fatal errors and spam scoring. Search login logs for wizardassistant.com. Shows IMAP, POP login attempts, transactions, fatal errors and spam scoring. Search login logs for [email protected] failed logins. Search login logs for [email protected] failed logins and find unique IP's. Search by IP to find which accounts are failing from 1.2.3.4 Search by IP to find which accounts are failing from 1.2.3.4 sorted unique accounts Search by IP to find which accounts are successfull from 1.2.3.4 sorted unique accounts Search by IP to find which accounts are failing from 1.2.3.4 without successful logins. Find who triggered firewall Search to find which accounts are failing logins from wizardassistant.com Search login logs for wizardassistant.com failed logins and find unique IP's. Search Email main logs for [email protected] Delivery and receipt logs Search Email main logs for 1.2.3.4 failed SMTP Search Email main logs for [email protected] failed SMTP. Find Device failing SMTP Logins. Find unique accounts failing SMTP login for lfd from 1.2.3.4 Search Email main logs for emails between [email protected] and [email protected] for Delivery and receipt logs Search Email reject logs for [email protected] Log of messages rejected based on ACLS or other policies. Search Email reject logs for emails between [email protected] and [email protected] for Delivery and receipt logs Search cPanel Roundcube Error log for [email protected] Tail cPanel Roundcube Error log Detect spammer's Find spam by wawebhos's home directory. Can use the date in form to search for specific date. Find emails sent by [email protected]'s by date. Can use the date in form to search for specific date. Find emails sent by wizardassistant.com's by date. Can use the date in form to search for specific date. Find spam for wizardassistant.com's and top 10 sender by date. Can use the date in form to search for specific date. Reset email password for hacked/spamming account.

CSF Firewall Tools
CSF show temp blocks (Lead/L2 only) L1 use WHM plugin
CSF flush temp blocks (Lead/L2 only) L1 use WHM plugin
CSF show block reason (Lead/L2 only) L1 use WHM plugin
CSF grep LFD log block reason
CSF grep LFD log block reason rotated logs
Multilog file checking for IP
CSF unblock IP (Lead/L2 only) L1 use WHM plugin
CSF temp whitelist IP for 7days (Lead/L2 only) L1 use WHM plugin
Universal Firewalltables check (Lead/L2 only) Universal Firewalltables check for routeblock (Lead/L2 only)

Fix file perms and ownership Fix weird account php and permissions issues resetperms did not fix Fix email permissions with cPanel user Fix Magento2 permissions run from Magento2 root directory. Starts in detached screen session. Fix webmail errors remove Dovecot indexes for cPanel user Update/rebuild horde config for cPanel user (Requires Root L2/Lead) Generate Maildirsize for cPanel user (Requires Root L2/Lead) Fix webmail errors delete 0 byte files for cPanel user and domain (Requires Root L2/Lead) Linux User's disk usage Linux User's Inode usage top 20 folders requires root ask Lead/L2 Inode Count Basic current directory Inode Detailed current directory Plesk Domain's disk usage. Don't forget to check Plesk backup Manager for unaccounted for disk usage hiding there. Plesk recalculate Domain's disk usage after files removed.(Lead/L2 only)

See users running processes in top See users running MySQL queries in mysqladmin Output users running processes via ps aux Kill users running processes Login As User List User's Cronjobs May Require Root List Current User's Cronjobs in Human readable List User's Cronjobs in Human readable May Require Root Find cPanel user's highest CPU use processes via Dcpumon Logs for today Find cPanel user's highest CPU use processes via Dcpumon Logs for Past 5 Days Find cPanel user's Wordpress stats for last 5 days Search Atop logs by a specific Time and Date Search Atop logs for a user by Date Malware scan Malware scan with quarantine Sucuri SiteCheck for Domain wizardassistant.com https://sitecheck.sucuri.net/results/wizardassistant.com

Wordpress CLI commands for primary domain. Run Gusuru by itself and then the cd portion and after as second command Wordpress CLI list wordpress users Wordpress CLI reset password for a Username. Replace USERNAME with the desired user from the wp user list command. Wordpress CLI Admin Pass Reset for primary domain. Wordpress CLI Support Admin User created for primary domain. Wordpress CLI Site URL Wordpress CLI Get Login URL Wordpress CLI Database Check Wordpress CLI Database Optimize Wordpress CLI Database Repair Wordpress CLI list themes Wordpress CLI install default theme to test Wordpress CLI update all plugins Wordpress CLI Verify checksums Wordpress CLI Core reinstall for primary domain. Great for fixing broken site after malware scan and quarantine

Magento CLI commands for primary domain. Run Gusuru by itself and then the cd portion and after as second command Tail Magento Error logs via relative path. Must be in Magento root directory. Tail Magento Error logs via full path. Magento CLI Enable Maintenance mode Magento CLI Disable Maintenance mode Magento CLI Display the version Magento CLI Display the current mode (Production/Development) Magento CLI Change To Developer Mode Using Command Line Magento CLI Change To Production Mode Using Command Line Magento CLI Clean and flush cache Magento CLI view cache status Magento CLI Setup upgrade Magento CLI run the single-tenant compiler Magento CLI Reindex. Can take a long time for large sites. Magento CLI Check indexer status Magento CLI view indexer list Magento CLI show mode of all indexers Magento CLI Redeploy missing content Magento CLI See all modules Status Magento CLI Enable module Using Command Line Magento CLI Disable module Using Command Line Magento CLI Uninstall module Using Command Line Magento CLI find admin area URI. Append to domain. Magento CLI Unlock locked admin where admin user is "USERNAME" Replace USERNAME with the desired admin user Magento CLI create new Admin. Use to login and reset existing admin user's password. Install Magento cron via CLI. Great for fixing readiness check failures Install Magento cron via CLI with overwrite Remove Magento cron via CLI Run Magento default cron via CLI Run Magento cron for all groups via CLI Run the Magento indexing cron job via CLI

Find cPanel user's login attempts to the cpsrvd daemon. Find cPanel user's login attempts for ssh/sftp Find cPanel user's records of when they accessed their account. Find cPanel user's activities performed while logged into their cPanel account. Find cPanel or FTP user's FTP logs Search Crons for wawebhos Find cPanel User's mailbox format Find when cPanel user was created/terminated Find when a domain was created/terminated Check for available Server Rewind backups for a terminated account Find which cPanel user owns an addon domain Find User's Domains Find Reseller's Domains Fetch all cPanel User's login, session, and activity logs for audit. Find a cPanel User's unique IP's from login, session, access, and ssh/sftp logs Fix horde/roundcube sqlite db errors for user. Regenerate DKIM keys for cPanel User(L2/Lead only) Fix Reseller Perms. Common cause for "Missing myprivs" WHM API error (Lead/L2 only) Restore MySQL grants for user(Lead/L2 only) Check cPanel/WHM main error log for addon domain Check cPanel/WHM main error log for cPanel User

Find Suspension reason for cPanel Check DatabaseGovernor Log UnSuspend account Suspend account

Find Apache Errors by domain Check Apache error logs for today for wizardassistant.com Check Apache error logs for yesterday for wizardassistant.com Find Apache Errors by domain in archived logs Find Apache Errors by username Find Apache Errors by username in archived logs Find Apache Errors by IP Find Apache Errors by IP in archived logs Find Apache Max Errors. Useful for finding Max retries, max request client errors Check for MaxClients or MaxRequestWorker notifications in the Apache error logs with sort Tail Apache errors live Tail Apache errors live by your current IP Tail Apache stderr.log live. Good for finding error for stuff not in standard Apache Error log Tail Apache stderr.log live by your current IP. Good for finding error for stuff not in standard Apache Error log MultiTail Apache error and stderr.log live by your current IP username domain. Good for filtering and finding stuff when debugging. Check cPanel apache httpd.conf for vhost for wizardassistant.com with vInfo By Devin Shoemaker Find Modsec Errors by domain Find Modsec Errors by IP

Get cPanel Users's Domlog Stats for previous 5 days The top ten number of POST requests per domain name for this today The top ten number of GET requests per domain name for today The top ten number of Bot requests per domain name for today The top ten IP's for today The top URL's for today

Search for 1.2.3.4 in Apache accesslogs by wizardassistant.com Search for 1.2.3.4 in Apache accesslogs for cPanel wawebhos View Apache requests per day for wizardassistant.com View Apache requests per day for cPanel wawebhos View Apache requests per hour for wizardassistant.com View Apache requests per hour for cPanel wawebhos View Apache requests per minute for wizardassistant.com View Apache requests per minute for cPanel wawebhos

Get Global Domlog Stats for previous 5 days Get Global Wordpress Shotgun Stats for today for all accounts under root or reseller user and its subaccounts. Get Global Wordpress Shotgun Stats for Previous 5 days for all accounts under root or reseller user and its subaccounts. The top ten number of POST requests per domain name for today The top ten number of GET requests per domain name for today The top ten number of Bot requests per domain name for today The top URL's for today The top ten IP's for today This section is for checking 06/Mar/2019:13:45 and the following 1HR from form input.

The top ten number of POST requests per domain name for 06/Mar/2019:13:45 The top ten number of GET requests per domain name for 06/Mar/2019:13:45 The top ten IP's for 06/Mar/2019:13:45 The top URL's for 06/Mar/2019:13:45