No longer flagged by Google Safebrowsing: http://killmalware.com/iomusic.se/#
WordPress plug-in scan reveals:
WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.
download-manager latest release (2.8.92)
http://www.wpdownloadmanager.com/purchases/
custom-facebook-feed-pro
media-element-html5-video-and-audio-player 2.10.3 latest release (2.10.3)
http://mediaelementjs.com/
Warning User Enumeration is possible :o User = admin Log-in = admin
Vulnerable jQuery libraries:
-http://iomusic.se
Detected libraries:
jquery-migrate - 1.2.1 : -http://iomusic.se/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
jquery.prettyPhoto - 3.1.4 : (active1) -http://iomusic.se/wp-content/themes/soundboard/js/prettyPhoto.js?ver=4.4.2
Info: Severity: high
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6837&cid=3
Info: Severity: high
https://github.com/scaron/prettyphoto/issues/149
https://blog.anantshri.info/forgotten_disclosure_dom_xss_prettyphoto
jquery - 1.11.3 : (active1) -http://iomusic.se/wp-includes/js/jquery/jquery.js?ver=1.11.3
(active) - the library was also found to be active by running code
2 vulnerable libraries detected
Various dns issues: http://www.dnsinspect.com/iomusic.se/1456155448
Probably has SPOF-code: Possible Frontend SPOF from:
fonts.googleapis.com - Whitelist
(60%) -
(59%) -
maxcdn.bootstrapcdn.com - Whitelist
(54%) -
Insecure Identifiers: 61% of the trackers on this site could be protecting you from NSA snooping. Tell iomusic.se to fix it.
Unique IDs about your web browsing habits have been insecurely sent to third parties.
-Twitter guest_id
-iomusic.se phpsessid
d5fb79cb40414aXXXXXXXd9651ae2ac1a1445965753
-local.adguard.com __cfduid
At least 13 third parties know you are on this webpage.
-Google
-axcdn.bootstrapcdn.com
-Facebook
-Facebook
-Google
-Google
-Twitter
-Google
-iomusic.se -iomusic.se
-local.adguard.com
-store.iomusic.se
-Google
-www.mustbebuilt.co.uk
SRI issues 3 with 3rd party code: Stylesheets 3 issues
Tag Result
So the website is no longer malicious or suspicious per se, no longer blacklisted by Googlke Safebrowsing, but to say the website is secure is another thing, vulnerable code should be mitigated and misconfigurations set right.
Also found server header info proliferation:
Server: Apache/2.2.31 (FreeBSD) PHP/5.5.32 mod_ssl/2.2.31 OpenSSL/0.9.8zd-freebsd
Do not let your server talk that loud!
X-Powered-By: PHP/5.5.32
IP Address: 194.9.94.194
Provider: Loopia AB
Country: Sweden
polonus (volunteer website security analyst and website error-hunter)