technology software

documentation technical

government public service

education learning

adult content

English

__smVID

Domain 'blog.wpsec.com' uses the commercial generic top-level domain (.com), featuring subdomain 'blog'. The second-level label 'wpsec' is 5 characters long containing one vowel alongside four consonants. Segmentation suggests 2 words: wp, sec. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

comment

email

author

submit

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

frame-ancestors 'self' https://*.myshopify.com https://*.shopify.com

script-src 'report-sample' 'nonce-AtWyMIogWQMcarvjSuoYKA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

application/x-www-form-urlencoded; charset=UTF-8

a-db6jya2q759b

reCAPTCHA

c760c198a04d2745bfe12673c753dd6dd9301d1e693539bd77703ea0e3a6c01b

3118320bca85a0ad1cfda19a1ae60520f1f92cdd030617dff961076bcd3eb517

72b6e611647f9f050330a8967d3c96c1a0209c808532535824333007bb8b1dbc

e9fdd5a059472e3df8341fec75a567c61a87f739cc082be0231e618b3c8ad13c

5dbede808bdea656473042f5d15ebbba284b4373ede12969a5d5b96d09748e33

f3e89c1ff35940ca514faaf0b95f3b79575bd099a4ce7e5b328193e6c9d9fe15

1457ce29d1e0863cd6b0ab7b2de61c8a0e1d92df4b58f1106a7e46c63fc75edf

beb4e8f80a8714c4b9f751281a0d013ae622e16579a912343b6b91dcf83f1def

99d1b40410c8b8efdd03764d388d9de2c61bc8fb4d4dc0125ed151b6bd8341f1

85e0a2d8239221ec3409f14c2a2a453aeca1b9a608962877ede22295ad003c11

063841f99ad79db6bc6df2649f1bf479bf3040e502428c57e38c017965c37c0c

944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6

f05bf655c03ba21de60179f37ff8f3e9382609a17847dd5d03e7593c7f041314

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

1ac60f53cd92f28429dec22acc8b2cb2935815038b5f4feae0b8356280aea387

0d1a19245b629b713ee9036a699aa9ffde84dc4d45f3ef1b3508ea19d3709224

db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968

e1d8d99d3074de7fc8747888add39735ddbe463a6f8f31b66e16193886f2afb5

6dd0852e72866bd1545d80601517c6446e8b66eb65ddc5b9085f6c0b1e198e8b

5f91abe6cfe6a563a8dd9040ce0e274ba376c6cfe3319434e7bc30ea4176f5d5

e9a58e98f0479425225f423ca2f85d83c34ea3e2d010fc87c08f4da870734eb7

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited

Critical Vulnerability in OttoKit WordPress Plugin Actively Exploited
Read More »

The Full Story of CVE-2024-6386: Remote Code Execution in WPML

The Full Story of CVE-2024-6386: Remote Code Execution in WPML
Read More »

4 Most Common WordPress Vulnerabilities (And How to Fix Them)

4 Most Common WordPress Vulnerabilities (And How to Fix Them)
Read More »

WordPress Forensic Investigations: Unveiling the Digital Clues

WordPress Forensic Investigations: Unveiling the Digital Clues
Read More »

Cracking WordPress Passwords
Read More »

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability

Over 300,000 WordPress Websites Affected by Critical Forminator Plugin Vulnerability
Read More »

Hardening the web server of your WordPress website

Hardening the web server of your WordPress website
Read More »

WordPress 6.4 Beta 1 Available for Testing!

WordPress 6.4 Beta 1 Available for Testing!
Read More »

Ongoing Cyberattack Exploits Ultimate Member Plugin

Ongoing Cyberattack Exploits Ultimate Member Plugin
Read More »

4 Essential WordPress Security Plugins to Protect Your Website

4 Essential WordPress Security Plugins to Protect Your Website
Read More »

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

viewport

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

robots

description

https://blog.wpsec.com/wp-content/uploads/2020/03/WordPress-code2.png

twitter:card

twitter:site

generator

https://blog.wpsec.com/wp-content/uploads/2020/03/cropped-wpsec-favicon-270x270.png

msapplication-TileImage

twitter:title

twitter:url

twitter:description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

WPSEC.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-CF

(function(w,i,g){w[g]=w[g]||[];if(typeof w[g].push=='function')w[g].push(i)})
(window,'GTM-M933PN','google_tags_first_party');

(function(w,d,s,l){w[l]=w[l]||[];(function(){w[l].push(arguments);})('set', 'developer_id.dY2E1Nz', true);
		var f=d.getElementsByTagName(s)[0],
		j=d.createElement(s);j.async=true;j.src='/4gt4/';
		f.parentNode.insertBefore(j,f);
		})(window,document,'script','dataLayer');

WPSec - WordPress Security Scanner

Home

WPSec

https://blog.wpsec.com/wp-content/uploads/2019/05/wpsec_small.png

var _mmunch = {'front': false, 'page': false, 'post': false, 'category': false, 'author': false, 'search': false, 'attachment': false, 'tag': false};_mmunch['front'] = true;

(function(s,u,m,o,j,v){j=u.createElement(m);v=u.getElementsByTagName(m)[0];j.async=1;j.src=o;j.dataset.sumoSiteId='1cd746009e6e91000d49aa00dee41b006d17cf0061190d00477f680032f44d00';j.dataset.sumoPlatform='wordpress';v.parentNode.insertBefore(j,v)})(window,document,'script','//load.sumome.com/');


var astra = {"break_point":"921","isRtl":"","is_scroll_to_id":"","is_scroll_to_top":"","is_header_footer_builder_active":"1","responsive_cart_click":"flyout","is_dark_palette":""};



_stq = window._stq || [];
_stq.push([ "view", JSON.parse("{\"v\":\"ext\",\"blog\":\"133438841\",\"post\":\"0\",\"tz\":\"1\",\"srv\":\"blog.wpsec.com\",\"arch_home\":\"1\",\"j\":\"1:15.2\"}") ]);
_stq.push([ "clickTrackerInit", "133438841", "0" ]);



var jetpackSwiperLibraryPath = {"url":"https:\/\/blog.wpsec.com\/wp-content\/plugins\/jetpack\/_inc\/blocks\/swiper.js"};
var jetpackCarouselStrings = {"widths":[370,700,1000,1200,1400,2000],"is_logged_in":"","lang":"en","ajaxurl":"https:\/\/blog.wpsec.com\/wp-admin\/admin-ajax.php","nonce":"a07260beb5","display_exif":"1","display_comments":"1","single_image_gallery":"1","single_image_gallery_media_file":"","background_color":"black","comment":"Comment","post_comment":"Post Comment","write_comment":"Write a Comment...","loading_comments":"Loading Comments...","image_label":"Open image in full-screen.","download_original":"View full size <span class=\"photo-size\">{0}<span class=\"photo-size-times\">\u00d7<\/span>{1}<\/span>","no_comment_text":"Please be sure to submit some text with your comment.","no_comment_email":"Please provide an email address to comment.","no_comment_author":"Please provide your name to comment.","comment_post_error":"Sorry, but there was an error posting your comment. Please try again later.","comment_approved":"Your comment was approved.","comment_unapproved":"Your comment is in moderation.","camera":"Camera","aperture":"Aperture","shutter_speed":"Shutter Speed","focal_length":"Focal Length","copyright":"Copyright","comment_registration":"0","require_name_email":"1","login_url":"https:\/\/blog.wpsec.com\/wp-login.php?redirect_to=https%3A%2F%2Fblog.wpsec.com%2Fhardening-the-web-server-of-your-wordpress-website%2F","blog_id":"1","meta_data":["camera","aperture","shutter_speed","focal_length","copyright"]};



			/(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.addEventListener&&window.addEventListener("hashchange",function(){var t,e=location.hash.substring(1);/^[A-z0-9_-]+$/.test(e)&&(t=document.getElementById(e))&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())},!1);
			


				/* @v3-js:start */
					let c4wp_onloadCallback = function() {
						for ( var i = 0; i < document.forms.length; i++ ) {
							let form 		   = document.forms[i];
							let captcha_div    = form.querySelector( '.c4wp_captcha_field_div:not(.rendered)' );
							let jetpack_sso    = form.querySelector( '#jetpack-sso-wrap' );
							var wcblock_submit = form.querySelector( '.wc-block-components-checkout-place-order-button' );
							var has_wc_submit  = null !== wcblock_submit;
							
							if ( null === captcha_div && ! has_wc_submit || form.id == 'create-group-form' ) {	
								if ( ! form.parentElement.classList.contains( 'nf-form-layout' ) ) {
									continue;
								}
							
							}
							if ( ! has_wc_submit ) {
								if ( !( captcha_div.offsetWidth || captcha_div.offsetHeight || captcha_div.getClientRects().length ) ) {					    	
									if ( jetpack_sso == null && ! form.classList.contains( 'woocommerce-form-login' ) ) {
										continue;
									}
								}
							}

							let alreadyCloned = form.querySelector( '.c4wp-submit' );
							if ( null != alreadyCloned ) {
								continue;
							}

							let foundSubmitBtn = form.querySelector( '#signup-form [type=submit], [type=submit]:not(#group-creation-create):not([name="signup_submit"]):not([name="ac_form_submit"]):not(.verify-captcha)' );
							let cloned = false;
							let clone  = false;

							// Submit button found, clone it.
							if ( foundSubmitBtn ) {
								clone = foundSubmitBtn.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( foundSubmitBtn.parentElement.form === null ) {
									foundSubmitBtn.parentElement.prepend(clone);
								} else {
									foundSubmitBtn.parentElement.insertBefore( clone, foundSubmitBtn );
								}
								foundSubmitBtn.style.display = "none";
								captcha_div                  = form.querySelector( '.c4wp_captcha_field_div' );
								cloned = true;
							}

							// WC block checkout clone btn.
							if ( has_wc_submit && ! form.classList.contains( 'c4wp-primed' ) ) {
								clone = wcblock_submit.cloneNode(true);
								clone.classList.add( 'c4wp-submit' );
								clone.classList.add( 'c4wp-clone' );
								clone.removeAttribute( 'onclick' );
								clone.removeAttribute( 'onkeypress' );
								if ( wcblock_submit.parentElement.form === null ) {
									wcblock_submit.parentElement.prepend(clone);
								} else {
									wcblock_submit.parentElement.insertBefore( clone, wcblock_submit );
								}
								wcblock_submit.style.display = "none";

								clone.addEventListener('click', function( e ){
									if ( form.classList.contains( 'c4wp_v2_fallback_active' ) ) {
										jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
										return true;
									} else {
										grecaptcha.execute( '6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF', ).then( function( data ) {
											form.classList.add( 'c4wp-primed' );
										});	
									}

								});
								foundSubmitBtn = wcblock_submit;
								cloned = true;
							}
							
							// Clone created, listen to its click.
							if ( cloned ) {
								clone.addEventListener( 'click', function ( event ) {
									logSubmit( event, 'cloned', form, foundSubmitBtn );
								});
							// No clone, execute and watch for form submission.
							} else {
								grecaptcha.execute(
									'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
								).then( function( data ) {
									var responseElem = form.querySelector( '.c4wp_response' );
									if ( responseElem == null ) {
										var responseElem = document.querySelector( '.c4wp_response' );
									}
									if ( responseElem != null ) {
										responseElem.setAttribute( 'value', data );	
									}									
								});

								// Anything else.
								form.addEventListener( 'submit', function ( event ) {
									logSubmit( event, 'other', form );
								});	
							}

							function logSubmit( event, form_type = '', form, foundSubmitBtn ) {
								// Standard v3 check.
								if ( ! form.classList.contains( 'c4wp_v2_fallback_active' ) && ! form.classList.contains( 'c4wp_verified' ) ) {
									event.preventDefault();
									try {
										grecaptcha.execute(
											'6LfF7dgbAAAAAESqwdDOnEDaVQbDv_YInlioxldF',
										).then( function( data ) {	
											var responseElem = form.querySelector( '.c4wp_response' );
											if ( responseElem == null ) {
												var responseElem = document.querySelector( '.c4wp_response' );
											}
											
											responseElem.setAttribute( 'value', data );	

											if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												// WC block checkout.
												let input = document.querySelector('input[id*="c4wp-wc-checkout"]'); 
												let lastValue = input.value;
												var token = data;
												input.value = token;
												let event = new Event('input', { bubbles: true });
												event.simulated = true;
												let tracker = input._valueTracker;
												if (tracker) {
													tracker.setValue( lastValue );
												}
												input.dispatchEvent(event)												
											}

											
											// Submit as usual.
											if ( foundSubmitBtn ) {
												foundSubmitBtn.click();
											} else if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
												jQuery( form ).find( '.wc-block-components-checkout-place-order-button:not(.c4wp-submit)' ).click(); 
											} else {
												
												if ( typeof form.submit === 'function' ) {
													form.submit();
												} else {
													HTMLFormElement.prototype.submit.call(form);
												}
											}

											return true;
										});
									} catch (e) {
										// Silence.
									}
								// V2 fallback.
								} else {
									if ( form.classList.contains( 'wpforms-form' ) || form.classList.contains( 'frm-fluent-form' ) || form.classList.contains( 'woocommerce-checkout' ) ) {
										return true;
									}

									if ( form.parentElement.classList.contains( 'nf-form-layout' ) ) {
										return false;
									}
									
									if ( form.classList.contains( 'wc-block-checkout__form' ) ) {
										return;
									}
									
									// Submit as usual.
									if ( typeof form.submit === 'function' ) {
										form.submit();
									} else {
										HTMLFormElement.prototype.submit.call(form);
									}

									return true;
								}
							};
						}
					};

					grecaptcha.ready( c4wp_onloadCallback );

					if ( typeof jQuery !== 'undefined' ) {
						jQuery( 'body' ).on( 'click', '.acomment-reply.bp-primary-action', function ( e ) {
							c4wp_onloadCallback();
						});	
					}

					//token is valid for 2 minutes, So get new token every after 1 minutes 50 seconds
					setInterval(c4wp_onloadCallback, 110000);

					
					window.addEventListener("load", (event) => {
						if ( typeof jQuery !== 'undefined' && jQuery( 'input[id*="c4wp-wc-checkout"]' ).length ) {
							var element = document.createElement('div');
							var html = '<div class="c4wp_captcha_field" style="margin-bottom: 10px" data-nonce="fb4b5a88db"><div id="c4wp_captcha_field_0" class="c4wp_captcha_field_div"><input type="hidden" name="g-recaptcha-response" class="c4wp_response" aria-label="do not use" aria-readonly="true" value="" /></div></div>';
							element.innerHTML = html;
							jQuery( '[class*="c4wp-wc-checkout"]' ).append( element );
							jQuery( '[class*="c4wp-wc-checkout"]' ).find('*').off();
							c4wp_onloadCallback();
						}
					});
				/* @v3-js:end */
			

Requests	IP Address	Location	AS Autonomous System
23	172.66.43.65	United States	AS13335CLOUDFLARENET
12	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
8	18.66.147.57	United States	AS16509AMAZON-02
5	142.250.185.131	United States	AS15169GOOGLE
5	44.252.163.227	Boardman, Oregon, United States	AS16509AMAZON-02
4	172.64.147.188	United States	AS13335CLOUDFLARENET
4	216.58.206.35	United States	AS15169GOOGLE
2	142.250.185.100	United States	AS15169GOOGLE
2	192.0.76.3	San Francisco, California, United States	AS2635AUTOMATTIC
2	3.33.241.96	United States	AS16509AMAZON-02
81	62	-	-

Security Scan Report: blog.wpsec.com

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History