technology software

documentation technical

government public service

education learning

adult content

English

__smVID

Domain 'blog.wpsec.com' uses the commercial generic top-level domain (.com), featuring subdomain 'blog'. The second-level label 'wpsec' is 5 characters long containing one vowel alongside four consonants. Segmentation suggests 2 words: wp, sec. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

html/a9/b1/a9b1aa68-2c74-47e6-87f0-6d3467e4f16e_fallback.html.gz

Just a moment...

comment

email

author

submit

html/a9/b1/a9b1aa68-2c74-47e6-87f0-6d3467e4f16e.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

frame-ancestors 'self' https://*.myshopify.com https://*.shopify.com

script-src 'report-sample' 'nonce-AtWyMIogWQMcarvjSuoYKA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

application/x-www-form-urlencoded; charset=UTF-8

a-db6jya2q759b

reCAPTCHA

85e0a2d8239221ec3409f14c2a2a453aeca1b9a608962877ede22295ad003c11

3118320bca85a0ad1cfda19a1ae60520f1f92cdd030617dff961076bcd3eb517

72b6e611647f9f050330a8967d3c96c1a0209c808532535824333007bb8b1dbc

e9fdd5a059472e3df8341fec75a567c61a87f739cc082be0231e618b3c8ad13c

063841f99ad79db6bc6df2649f1bf479bf3040e502428c57e38c017965c37c0c

f05bf655c03ba21de60179f37ff8f3e9382609a17847dd5d03e7593c7f041314

5dbede808bdea656473042f5d15ebbba284b4373ede12969a5d5b96d09748e33

f3e89c1ff35940ca514faaf0b95f3b79575bd099a4ce7e5b328193e6c9d9fe15

c760c198a04d2745bfe12673c753dd6dd9301d1e693539bd77703ea0e3a6c01b

1457ce29d1e0863cd6b0ab7b2de61c8a0e1d92df4b58f1106a7e46c63fc75edf

beb4e8f80a8714c4b9f751281a0d013ae622e16579a912343b6b91dcf83f1def

944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6

99d1b40410c8b8efdd03764d388d9de2c61bc8fb4d4dc0125ed151b6bd8341f1

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

1ac60f53cd92f28429dec22acc8b2cb2935815038b5f4feae0b8356280aea387

0d1a19245b629b713ee9036a699aa9ffde84dc4d45f3ef1b3508ea19d3709224

db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968

e1d8d99d3074de7fc8747888add39735ddbe463a6f8f31b66e16193886f2afb5

6dd0852e72866bd1545d80601517c6446e8b66eb65ddc5b9085f6c0b1e198e8b

5f91abe6cfe6a563a8dd9040ce0e274ba376c6cfe3319434e7bc30ea4176f5d5

e9a58e98f0479425225f423ca2f85d83c34ea3e2d010fc87c08f4da870734eb7

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited
Read More »

The Full Story of CVE-2024-6386: Remote Code Execution in WPML

The Full Story of CVE-2024-6386: Remote Code Execution in WPML
Read More »

4 Most Common WordPress Vulnerabilities (And How to Fix Them)

4 Most Common WordPress Vulnerabilities (And How to Fix Them)
Read More »

WordPress Forensic Investigations: Unveiling the Digital Clues

WordPress Forensic Investigations: Unveiling the Digital Clues
Read More »

Cracking WordPress Passwords
Read More »

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability
Read More »

Hardening the web server of your WordPress website

Hardening the web server of your WordPress website
Read More »

WordPress 6.4 Beta 1 Available for Testing!

WordPress 6.4 Beta 1 Available for Testing!
Read More »

Ongoing Cyberattack Exploits Ultimate Member Plugin

Ongoing Cyberattack Exploits Ultimate Member Plugin
Read More »

4 Essential WordPress Security Plugins to Protect Your Website

4 Essential WordPress Security Plugins to Protect Your Website
Read More »

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

viewport

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

robots

description

https://blog.wpsec.com/wp-content/uploads/2020/03/WordPress-code2.png

twitter:card

twitter:site

generator

https://blog.wpsec.com/wp-content/uploads/2020/03/cropped-wpsec-favicon-270x270.png

msapplication-TileImage

twitter:title

twitter:url

twitter:description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

WPSEC.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF

(function(w,i,g){w[g]=w[g]||[];if(typeof w[g].push=='function')w[g].push(i)})
(window,'GTM-M933PN','google_tags_first_party');

(function(w,d,s,l){w[l]=w[l]||[];(function(){w[l].push(arguments);})('set', 'developer_id.dY2E1Nz', true);
		var f=d.getElementsByTagName(s)[0],
		j=d.createElement(s);j.async=true;j.src='/4gt4/';
		f.parentNode.insertBefore(j,f);
		})(window,document,'script','dataLayer');

WPSec - WordPress Security Scanner

Home

WPSec

https://blog.wpsec.com/wp-content/uploads/2019/05/wpsec_small.png

var _mmunch = {'front': false, 'page': false, 'post': false, 'category': false, 'author': false, 'search': false, 'attachment': false, 'tag': false};_mmunch['front'] = true;

(function(s,u,m,o,j,v){j=u.createElement(m);v=u.getElementsByTagName(m)[0];j.async=1;j.src=o;j.dataset.sumoSiteId='1cd746009e6e91000d49aa00dee41b006d17cf0061190d00477f680032f44d00';j.dataset.sumoPlatform='wordpress';v.parentNode.insertBefore(j,v)})(window,document,'script','//load.sumome.com/');


var astra = {"break_point":"921","isRtl":"","is_scroll_to_id":"","is_scroll_to_top":"","is_header_footer_builder_active":"1","responsive_cart_click":"flyout","is_dark_palette":""};



_stq = window._stq || [];
_stq.push([ "view", JSON.parse("{\"v\":\"ext\",\"blog\":\"133438841\",\"post\":\"0\",\"tz\":\"1\",\"srv\":\"blog.wpsec.com\",\"arch_home\":\"1\",\"j\":\"1:15.2\"}") ]);
_stq.push([ "clickTrackerInit", "133438841", "0" ]);



var jetpackSwiperLibraryPath = {"url":"https:\/\/blog.wpsec.com\/wp-content\/plugins\/jetpack\/_inc\/blocks\/swiper.js"};
var jetpackCarouselStrings = {"widths":[370,700,1000,1200,1400,2000],"is_logged_in":"","lang":"en","ajaxurl":"https:\/\/blog.wpsec.com\/wp-admin\/admin-ajax.php","nonce":"a07260beb5","display_exif":"1","display_comments":"1","single_image_gallery":"1","single_image_gallery_media_file":"","background_color":"black","comment":"Comment","post_comment":"Post Comment","write_comment":"Write a Comment...","loading_comments":"Loading Comments...","image_label":"Open image in full-screen.","download_original":"View full size <span class=\"photo-size\">{0}<span class=\"photo-size-times\">\u00d7<\/span>{1}<\/span>","no_comment_text":"Please be sure to submit some text with your comment.","no_comment_email":"Please provide an email address to comment.","no_comment_author":"Please provide your name to comment.","comment_post_error":"Sorry, but there was an error posting your comment. Please try again later.","comment_approved":"Your comment was approved.","comment_unapproved":"Your comment is in moderation.","camera":"Camera","aperture":"Aperture","shutter_speed":"Shutter Speed","focal_length":"Focal Length","copyright":"Copyright","comment_registration":"0","require_name_email":"1","login_url":"https:\/\/blog.wpsec.com\/wp-login.php?redirect_to=https%3A%2F%2Fblog.wpsec.com%2Fhardening-the-web-server-of-your-wordpress-website%2F","blog_id":"1","meta_data":["camera","aperture","shutter_speed","focal_length","copyright"]};



			/(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.addEventListener&&window.addEventListener("hashchange",function(){var t,e=location.hash.substring(1);/^[A-z0-9_-]+$/.test(e)&&(t=document.getElementById(e))&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())},!1);
			


				/* @v3-js:start */
					let c4wp_onloadCallback = function() {
						for ( var i = 0; i < document.forms.length; i++ ) {
							let form 		   = document.forms[i];
							let captcha_div    = form.querySelector( '.c4wp_captcha_field_div:not(.rendered)' );
							let jetpack_sso    = form.querySelector( '#jetpack-sso-wrap' );
							var wcblock_submit = form.querySelector( '.wc-block-components-checkout-place-order-button' );
							var has_wc_submit  = null !== wcblock_submit;
							
							if ( null === captcha_div && ! has_wc_submit || form.id == 'create-group-form' ) {	
								if ( ! form.parentElement.classList.contains( 'nf-form-layout' ) ) {
									continue;
								}
							
							}
							if ( ! has_wc_submit ) {
								if ( !( captcha_div.offsetWidth || captcha_div.offsetHeight || captcha_div.getClientRects().length ) ) {					    	
									if ( jetpack_sso == null && ! form.classList.contains( 'woocommerce-form-login' ) ) {
										continue;
									}
								}
							}

							let alreadyCloned = form.querySelector( '.c4wp-submit' );
							if ( null != alreadyCloned ) {
								continue;
							}

							let foundSubmitBtn = form.querySelector( '#signup-form [type=submit], [type=submit]:not(#group-creation-create):not([name="signup_submit"]):not([name="ac_form_submit"]):not(.verify-captcha)' );
							let cloned = false;
							let clone  = false;

							// Submit button found, clone it.
							if ( foundSubmitBtn ) {
								clone = foundSubmitBtn.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( foundSubmitBtn.parentElement.form === null ) {
									foundSubmitBtn.parentElement.prepend(clone);
								} else {
									foundSubmitBtn.parentElement.insertBefore( clone, foundSubmitBtn );
								}
								foundSubmitBtn.style.display = "none";
								captcha_div                  = form.querySelector( '.c4wp_captcha_field_div' );
								cloned = true;
							}

							// WC block checkout clone btn.
							if ( has_wc_submit && ! form.classList.contains( 'c4wp-primed' ) ) {
								clone = wcblock_submit.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.classList.add( 'c4wp-clone' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( wcblock_submit.parentElement.form === null ) {
									wcblock_submit.parentElement.prepend(clone);
								} else {
									wcblock_submit.parentElement.insertBefore( clone, wcblock_submit );
								}
								wcblock_submit.style.display = "none";

								clone.addEventListener('click', function( e ){
									if ( form.classList.contains( 'c4wp_v2_fallback_active' ) ) {
										jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
										return true;
									} else {
										grecaptcha.execute( '6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF', ).then( function( data ) {
											form.classList.add( 'c4wp-primed' );
										});	
									}

								});
								foundSubmitBtn = wcblock_submit;
								cloned = true;
							}
							
							// Clone created, listen to its click.
							if ( cloned ) {
								clone.addEventListener( 'click', function ( event ) {
									logSubmit( event, 'cloned', form, foundSubmitBtn );
								});
							// No clone, execute and watch for form submission.
							} else {
								grecaptcha.execute(
									'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
								).then( function( data ) {
									var responseElem = form.querySelector( '.c4wp_response' );
									if ( responseElem == null ) {
										var responseElem = document.querySelector( '.c4wp_response' );
									}
									if ( responseElem != null ) {
										responseElem.setAttribute( 'value', data );	
									}									
								});

								// Anything else.
								form.addEventListener( 'submit', function ( event ) {
									logSubmit( event, 'other', form );
								});	
							}

							function logSubmit( event, form_type = '', form, foundSubmitBtn ) {
								// Standard v3 check.
								if ( ! form.classList.contains( 'c4wp_v2_fallback_active' ) && ! form.classList.contains( 'c4wp_verified' ) ) {
									event.preventDefault();
									try {
										grecaptcha.execute(
											'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
										).then( function( data ) {	
											var responseElem = form.querySelector( '.c4wp_response' );
											if ( responseElem == null ) {
												var responseElem = document.querySelector( '.c4wp_response' );
											}
											
											responseElem.setAttribute( 'value', data );	

											if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												// WC block checkout.
												let input = document.querySelector('input[id*="c4wp-wc-checkout"]'); 
												let lastValue = input.value;
												var token = data;
												input.value = token;
												let event = new Event('input', { bubbles: true });
												event.simulated = true;
												let tracker = input._valueTracker;
												if (tracker) {
													tracker.setValue( lastValue );
												}
												input.dispatchEvent(event)												
											}

											
											// Submit as usual.
											if ( foundSubmitBtn ) {
												foundSubmitBtn.click();
											} else if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
											} else {
												
												if ( typeof form.submit === 'function' ) {
													form.submit();
												} else {
													HTMLFormElement.prototype.submit.call(form);
												}
											}

											return true;
										});
									} catch (e) {
										// Silence.
									}
								// V2 fallback.
								} else {
									if ( form.classList.contains( 'wpforms-form' ) || form.classList.contains( 'frm-fluent-form' ) || form.classList.contains( 'woocommerce-checkout' ) ) {
										return true;
									}

									if ( form.parentElement.classList.contains( 'nf-form-layout' ) ) {
										return false;
									}
									
									if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
										return;
									}
									
									// Submit as usual.
									if ( typeof form.submit === 'function' ) {
										form.submit();
									} else {
										HTMLFormElement.prototype.submit.call(form);
									}

									return true;
								}
							};
						}
					};

					grecaptcha.ready( c4wp_onloadCallback );

					if ( typeof jQuery !== 'undefined' ) {
						jQuery( 'body' ).on( 'click', '.acomment-reply.bp-primary-action', function ( e ) {
							c4wp_onloadCallback();
						});	
					}

					//token is valid for 2 minutes, So get new token every after 1 minutes 50 seconds
					setInterval(c4wp_onloadCallback, 110000);

					
					window.addEventListener("load", (event) => {
						if ( typeof jQuery !== 'undefined' && jQuery( 'input[id*="c4wp-wc-checkout"]' ).length ) {
							var element = document.createElement('div');
							var html = '<div class="c4wp_captcha_field" style="margin-bottom: 10px" data-nonce="fb4b5a88db"><div id="c4wp_captcha_field_0" class="c4wp_captcha_field_div"><input type="hidden" name="g-recaptcha-response" class="c4wp_response" aria-label="do not use" aria-readonly="true" value="" /></div></div>';
							element.innerHTML = html;
							jQuery( '[class*="c4wp-wc-checkout"]' ).append( element );
							jQuery( '[class*="c4wp-wc-checkout"]' ).find('*').off();
							c4wp_onloadCallback();
						}
					});
				/* @v3-js:end */
			

Requests	IP Address	Location	AS Autonomous System
23	172.66.43.65	United States	AS13335CLOUDFLARENET
12	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
8	18.66.147.57	United States	AS16509AMAZON-02
5	142.250.185.131	United States	AS15169GOOGLE
5	44.252.163.227	Boardman, Oregon, United States	AS16509AMAZON-02
4	172.64.147.188	United States	AS13335CLOUDFLARENET
4	216.58.206.35	United States	AS15169GOOGLE
2	142.250.185.100	United States	AS15169GOOGLE
2	192.0.76.3	San Francisco, California, United States	AS2635AUTOMATTIC
2	3.33.241.96	United States	AS16509AMAZON-02
81	62	-	-

Security Scan Report: blog.wpsec.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Website Access Blocked

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History