technology software

documentation technical

government public service

education learning

adult content

English

__smVID

Within the commercial generic top-level domain (.com), 'blog.wpscans.com' is registered and includes subdomain 'blog'. Count 7 characters in 'wpscans' holding one vowel versus six consonants. It segments into 2 words: wp, scans. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

html/34/9f/349fb79d-6d9c-462a-87b7-3d1c5c14a510_fallback.html.gz

WPSec - WordPress Security Scanner

comment

email

author

submit

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'report-sample' 'nonce-FOUY4Eo1RsG02bpqHUPIqA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

frame-ancestors 'self' https://*.myshopify.com https://*.shopify.com

application/x-www-form-urlencoded; charset=UTF-8

a-hb2ksza12kyr

reCAPTCHA

7e08b9fe3b49a98e5116cb37293f2043f1719ae3ba911fce73a20208089c9807

85e0a2d8239221ec3409f14c2a2a453aeca1b9a608962877ede22295ad003c11

3118320bca85a0ad1cfda19a1ae60520f1f92cdd030617dff961076bcd3eb517

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

b427df70af27cd13c7d357e8c9d030a451dd181276b61ee085cd13c62e5086d8

72b6e611647f9f050330a8967d3c96c1a0209c808532535824333007bb8b1dbc

e9fdd5a059472e3df8341fec75a567c61a87f739cc082be0231e618b3c8ad13c

063841f99ad79db6bc6df2649f1bf479bf3040e502428c57e38c017965c37c0c

0d1a19245b629b713ee9036a699aa9ffde84dc4d45f3ef1b3508ea19d3709224

f05bf655c03ba21de60179f37ff8f3e9382609a17847dd5d03e7593c7f041314

5dbede808bdea656473042f5d15ebbba284b4373ede12969a5d5b96d09748e33

f3e89c1ff35940ca514faaf0b95f3b79575bd099a4ce7e5b328193e6c9d9fe15

db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968

c760c198a04d2745bfe12673c753dd6dd9301d1e693539bd77703ea0e3a6c01b

1457ce29d1e0863cd6b0ab7b2de61c8a0e1d92df4b58f1106a7e46c63fc75edf

e1d8d99d3074de7fc8747888add39735ddbe463a6f8f31b66e16193886f2afb5

6dd0852e72866bd1545d80601517c6446e8b66eb65ddc5b9085f6c0b1e198e8b

ef917f4b9a1623422337465d7d0e9a761a466000e315e91ddd34d694bc805bb2

944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6

5f91abe6cfe6a563a8dd9040ce0e274ba376c6cfe3319434e7bc30ea4176f5d5

e9a58e98f0479425225f423ca2f85d83c34ea3e2d010fc87c08f4da870734eb7

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited
Read More »

The Full Story of CVE-2024-6386: Remote Code Execution in WPML

The Full Story of CVE-2024-6386: Remote Code Execution in WPML
Read More »

4 Most Common WordPress Vulnerabilities (And How to Fix Them)

4 Most Common WordPress Vulnerabilities (And How to Fix Them)
Read More »

WordPress Forensic Investigations: Unveiling the Digital Clues

WordPress Forensic Investigations: Unveiling the Digital Clues
Read More »

Cracking WordPress Passwords
Read More »

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability
Read More »

Hardening the web server of your WordPress website

Hardening the web server of your WordPress website
Read More »

WordPress 6.4 Beta 1 Available for Testing!

WordPress 6.4 Beta 1 Available for Testing!
Read More »

Ongoing Cyberattack Exploits Ultimate Member Plugin

Ongoing Cyberattack Exploits Ultimate Member Plugin
Read More »

4 Essential WordPress Security Plugins to Protect Your Website

4 Essential WordPress Security Plugins to Protect Your Website
Read More »

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

viewport

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

robots

description

https://blog.wpsec.com/wp-content/uploads/2020/03/WordPress-code2.png

twitter:card

twitter:site

generator

https://blog.wpsec.com/wp-content/uploads/2020/03/cropped-wpsec-favicon-270x270.png

msapplication-TileImage

twitter:title

twitter:url

twitter:description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

WPSCANS.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF2

(function(w,i,g){w[g]=w[g]||[];if(typeof w[g].push=='function')w[g].push(i)})
(window,'GTM-M933PN','google_tags_first_party');

(function(w,d,s,l){w[l]=w[l]||[];(function(){w[l].push(arguments);})('set', 'developer_id.dY2E1Nz', true);
		var f=d.getElementsByTagName(s)[0],
		j=d.createElement(s);j.async=true;j.src='/4gt4/';
		f.parentNode.insertBefore(j,f);
		})(window,document,'script','dataLayer');

Home

WPSec

https://blog.wpsec.com/wp-content/uploads/2019/05/wpsec_small.png

var _mmunch = {'front': false, 'page': false, 'post': false, 'category': false, 'author': false, 'search': false, 'attachment': false, 'tag': false};_mmunch['front'] = true;

(function(s,u,m,o,j,v){j=u.createElement(m);v=u.getElementsByTagName(m)[0];j.async=1;j.src=o;j.dataset.sumoSiteId='1cd746009e6e91000d49aa00dee41b006d17cf0061190d00477f680032f44d00';j.dataset.sumoPlatform='wordpress';v.parentNode.insertBefore(j,v)})(window,document,'script','//load.sumome.com/');


var astra = {"break_point":"921","isRtl":"","is_scroll_to_id":"","is_scroll_to_top":"","is_header_footer_builder_active":"1","responsive_cart_click":"flyout","is_dark_palette":""};



_stq = window._stq || [];
_stq.push([ "view", JSON.parse("{\"v\":\"ext\",\"blog\":\"133438841\",\"post\":\"0\",\"tz\":\"1\",\"srv\":\"blog.wpsec.com\",\"arch_home\":\"1\",\"j\":\"1:15.2\"}") ]);
_stq.push([ "clickTrackerInit", "133438841", "0" ]);



var jetpackSwiperLibraryPath = {"url":"https:\/\/blog.wpsec.com\/wp-content\/plugins\/jetpack\/_inc\/blocks\/swiper.js"};
var jetpackCarouselStrings = {"widths":[370,700,1000,1200,1400,2000],"is_logged_in":"","lang":"en","ajaxurl":"https:\/\/blog.wpsec.com\/wp-admin\/admin-ajax.php","nonce":"8ab4bde990","display_exif":"1","display_comments":"1","single_image_gallery":"1","single_image_gallery_media_file":"","background_color":"black","comment":"Comment","post_comment":"Post Comment","write_comment":"Write a Comment...","loading_comments":"Loading Comments...","image_label":"Open image in full-screen.","download_original":"View full size <span class=\"photo-size\">{0}<span class=\"photo-size-times\">\u00d7<\/span>{1}<\/span>","no_comment_text":"Please be sure to submit some text with your comment.","no_comment_email":"Please provide an email address to comment.","no_comment_author":"Please provide your name to comment.","comment_post_error":"Sorry, but there was an error posting your comment. Please try again later.","comment_approved":"Your comment was approved.","comment_unapproved":"Your comment is in moderation.","camera":"Camera","aperture":"Aperture","shutter_speed":"Shutter Speed","focal_length":"Focal Length","copyright":"Copyright","comment_registration":"0","require_name_email":"1","login_url":"https:\/\/blog.wpsec.com\/wp-login.php?redirect_to=https%3A%2F%2Fblog.wpsec.com%2Fhardening-the-web-server-of-your-wordpress-website%2F","blog_id":"1","meta_data":["camera","aperture","shutter_speed","focal_length","copyright"]};



			/(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.addEventListener&&window.addEventListener("hashchange",function(){var t,e=location.hash.substring(1);/^[A-z0-9_-]+$/.test(e)&&(t=document.getElementById(e))&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())},!1);
			


				/* @v3-js:start */
					let c4wp_onloadCallback = function() {
						for ( var i = 0; i < document.forms.length; i++ ) {
							let form 		   = document.forms[i];
							let captcha_div    = form.querySelector( '.c4wp_captcha_field_div:not(.rendered)' );
							let jetpack_sso    = form.querySelector( '#jetpack-sso-wrap' );
							var wcblock_submit = form.querySelector( '.wc-block-components-checkout-place-order-button' );
							var has_wc_submit  = null !== wcblock_submit;
							
							if ( null === captcha_div && ! has_wc_submit || form.id == 'create-group-form' ) {	
								if ( ! form.parentElement.classList.contains( 'nf-form-layout' ) ) {
									continue;
								}
							
							}
							if ( ! has_wc_submit ) {
								if ( !( captcha_div.offsetWidth || captcha_div.offsetHeight || captcha_div.getClientRects().length ) ) {					    	
									if ( jetpack_sso == null && ! form.classList.contains( 'woocommerce-form-login' ) ) {
										continue;
									}
								}
							}

							let alreadyCloned = form.querySelector( '.c4wp-submit' );
							if ( null != alreadyCloned ) {
								continue;
							}

							let foundSubmitBtn = form.querySelector( '#signup-form [type=submit], [type=submit]:not(#group-creation-create):not([name="signup_submit"]):not([name="ac_form_submit"]):not(.verify-captcha)' );
							let cloned = false;
							let clone  = false;

							// Submit button found, clone it.
							if ( foundSubmitBtn ) {
								clone = foundSubmitBtn.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( foundSubmitBtn.parentElement.form === null ) {
									foundSubmitBtn.parentElement.prepend(clone);
								} else {
									foundSubmitBtn.parentElement.insertBefore( clone, foundSubmitBtn );
								}
								foundSubmitBtn.style.display = "none";
								captcha_div                  = form.querySelector( '.c4wp_captcha_field_div' );
								cloned = true;
							}

							// WC block checkout clone btn.
							if ( has_wc_submit && ! form.classList.contains( 'c4wp-primed' ) ) {
								clone = wcblock_submit.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.classList.add( 'c4wp-clone' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( wcblock_submit.parentElement.form === null ) {
									wcblock_submit.parentElement.prepend(clone);
								} else {
									wcblock_submit.parentElement.insertBefore( clone, wcblock_submit );
								}
								wcblock_submit.style.display = "none";

								clone.addEventListener('click', function( e ){
									if ( form.classList.contains( 'c4wp_v2_fallback_active' ) ) {
										jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
										return true;
									} else {
										grecaptcha.execute( '6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF', ).then( function( data ) {
											form.classList.add( 'c4wp-primed' );
										});	
									}

								});
								foundSubmitBtn = wcblock_submit;
								cloned = true;
							}
							
							// Clone created, listen to its click.
							if ( cloned ) {
								clone.addEventListener( 'click', function ( event ) {
									logSubmit( event, 'cloned', form, foundSubmitBtn );
								});
							// No clone, execute and watch for form submission.
							} else {
								grecaptcha.execute(
									'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
								).then( function( data ) {
									var responseElem = form.querySelector( '.c4wp_response' );
									if ( responseElem == null ) {
										var responseElem = document.querySelector( '.c4wp_response' );
									}
									if ( responseElem != null ) {
										responseElem.setAttribute( 'value', data );	
									}									
								});

								// Anything else.
								form.addEventListener( 'submit', function ( event ) {
									logSubmit( event, 'other', form );
								});	
							}

							function logSubmit( event, form_type = '', form, foundSubmitBtn ) {
								// Standard v3 check.
								if ( ! form.classList.contains( 'c4wp_v2_fallback_active' ) && ! form.classList.contains( 'c4wp_verified' ) ) {
									event.preventDefault();
									try {
										grecaptcha.execute(
											'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
										).then( function( data ) {	
											var responseElem = form.querySelector( '.c4wp_response' );
											if ( responseElem == null ) {
												var responseElem = document.querySelector( '.c4wp_response' );
											}
											
											responseElem.setAttribute( 'value', data );	

											if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												// WC block checkout.
												let input = document.querySelector('input[id*="c4wp-wc-checkout"]'); 
												let lastValue = input.value;
												var token = data;
												input.value = token;
												let event = new Event('input', { bubbles: true });
												event.simulated = true;
												let tracker = input._valueTracker;
												if (tracker) {
													tracker.setValue( lastValue );
												}
												input.dispatchEvent(event)												
											}

											
											// Submit as usual.
											if ( foundSubmitBtn ) {
												foundSubmitBtn.click();
											} else if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
											} else {
												
												if ( typeof form.submit === 'function' ) {
													form.submit();
												} else {
													HTMLFormElement.prototype.submit.call(form);
												}
											}

											return true;
										});
									} catch (e) {
										// Silence.
									}
								// V2 fallback.
								} else {
									if ( form.classList.contains( 'wpforms-form' ) || form.classList.contains( 'frm-fluent-form' ) || form.classList.contains( 'woocommerce-checkout' ) ) {
										return true;
									}

									if ( form.parentElement.classList.contains( 'nf-form-layout' ) ) {
										return false;
									}
									
									if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
										return;
									}
									
									// Submit as usual.
									if ( typeof form.submit === 'function' ) {
										form.submit();
									} else {
										HTMLFormElement.prototype.submit.call(form);
									}

									return true;
								}
							};
						}
					};

					grecaptcha.ready( c4wp_onloadCallback );

					if ( typeof jQuery !== 'undefined' ) {
						jQuery( 'body' ).on( 'click', '.acomment-reply.bp-primary-action', function ( e ) {
							c4wp_onloadCallback();
						});	
					}

					//token is valid for 2 minutes, So get new token every after 1 minutes 50 seconds
					setInterval(c4wp_onloadCallback, 110000);

					
					window.addEventListener("load", (event) => {
						if ( typeof jQuery !== 'undefined' && jQuery( 'input[id*="c4wp-wc-checkout"]' ).length ) {
							var element = document.createElement('div');
							var html = '<div class="c4wp_captcha_field" style="margin-bottom: 10px" data-nonce="e6b831f5c2"><div id="c4wp_captcha_field_0" class="c4wp_captcha_field_div"><input type="hidden" name="g-recaptcha-response" class="c4wp_response" aria-label="do not use" aria-readonly="true" value="" /></div></div>';
							element.innerHTML = html;
							jQuery( '[class*="c4wp-wc-checkout"]' ).append( element );
							jQuery( '[class*="c4wp-wc-checkout"]' ).find('*').off();
							c4wp_onloadCallback();
						}
					});
				/* @v3-js:end */
			

Google authentication and security services

Requests	IP Address	Location	AS Autonomous System
19	172.66.43.65	United States	AS13335CLOUDFLARENET
12	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
8	54.192.35.82	United States	AS16509AMAZON-02
7	16.146.166.18	United States	AS16509AMAZON-02
4	142.250.186.131	United States	AS15169GOOGLE
4	142.250.186.67	United States	AS15169GOOGLE
2	142.250.185.68	United States	AS15169GOOGLE
2	13.248.213.92	United States	AS16509AMAZON-02
2	172.67.164.63	United States	AS13335CLOUDFLARENET
2	142.250.186.106	United States	AS15169GOOGLE
80	67	-	-

Security Scan Report: blog.wpscans.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History