See: https://urlquery.net/report.php?id=1435247963141
PHISH: https://www.virustotal.com/en-gb/url/a27d865daf303332bf9fd658d5176e914ceb644cb9d778bcf0e6a49f66ec8ee8/analysis/
Malware IP history: https://www.virustotal.com/en-gb/ip-address/198.57.197.204/information/
249 websites on one and the same IP address - added security risks!
Site Potentially Harmful -
WP Theme - Twenty Ten 1.9 https://wordpress.org/themes/twentyten/
http://www.securityfocus.com/bid/57073/discussWordPress
TwentyTen Theme ‘loo.php’ Arbitrary File Upload Vulnerability
Stop editing this core theme or you might risk to lose all your code! (pol)
Warnings:
User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.
User ID 1 : admin
User ID 2 : -
Warning Directory Indexing Enabled
In the test we attempted to list the directory contents of the uploads and plugins folders to determine if Directory Indexing is enabled. This is an information leakage vulnerability that can reveal sensitive information regarding your site configuration or content.
/wp-content/uploads/ enabled
/wp-content/plugins/ disabled
Externally linked host: es.wordpress.org
PHISH on wXw.hnasdelhuerto.org.py/wp-admin/js/bankofamerica/index.html → http://linkeddata.informatik.hu-berlin.de/uridbg/index.php?url=www.hnasdelhuerto.org.py%2Fwp-admin%2Fjs%2Fbankofamerica%2Findex.html&useragentheader=&acceptheader=
Mal-png on TIL imgur’s server: http://linkeddata.informatik.hu-berlin.de/uridbg/index.php?url=http://i.imgur.com/ICYX3Fi.png&acceptheader=&useragentheader=
ICYX3Fi.png&acceptheader=&useragentheader= … not detected!
polonus