Analysis Results

Export PDF Report Rescan Website Analyze Another Website

https://creo-kancelaria.pl/

Analyzed on November 1, 2025, 2:53 p.m. Click "Rescan Website" to get the latest data

Analysis Successful

MALWARE DETECTED!

Severity Level: LOW

Found 1 suspicious pattern(s)

View Detailed Analysis Request Assistance

Network Information

IP Address: 185.208.164.165

IP WHOIS Information:

ASN: 41079
ASN Description: CF-GDA, PL
Country: PL
Description: CF-Shared-Hosting GD
CIDR: 185.208.164.0/23

Ping Test Check AbuseIPDB Other Websites on Same IP

Domain Information

Registrar: cyber_Folks S.A.
Created: October 21, 2024
Expires: October 21, 2026
Last Updated: October 02, 2025
Name Servers:
- ns1.iq.pl
- ns2.iq.pl
- ns3.iq.pl

DNS Records

Learn about DNS Records

A Records (IPv4 Addresses)

Domain	IP Address
`creo-kancelaria.pl`	185.208.164.165

MX Records (Mail Servers)

Priority	Mail Server
1	`mx1.iq.pl.`
5	`mail.iq.pl.`

TXT Records

Domain	Text Record
`creo-kancelaria.pl`	`"v=spf1 a mx ptr ip4:86.111.240.0/21 -all"`

WWW Subdomain Records

Subdomain	Type	Value
`www.creo-kancelaria.pl`	A	`185.208.164.165`

Services Detected (0 found)

View DNS History on DNS Archive

Check GeoIP Blocking

Blocklisting Status

Learn about Blocklisting Status

Overall Status: CLEAN No blocklisting detected

Services Checked: 2

VirusTotal: CLEAN

Domain is clean according to 0 scanners
No threats detected by any security scanner

Google Safe Browsing: CLEAN

Domain is not blocklisted by Google Safe Browsing
No threats detected

Hosting Information

Provider: Unknown (none confidence)

Detection Method: No match found

SSL/TLS Security

Learn about SSL/TLS Security

TLS Version: TLSv1.3

SSL Certificate:

Certificate Type: DV (Domain Validated - Basic Security)
Subject: creo-kancelaria.pl
Certificate Authority (CA): R13
Let's Encrypt
US
Valid From: Nov 1 07:27:36 2025 GMT
Valid Until: Jan 30 07:27:35 2026 GMT
Serial Number: 05F832955C87A03980FE2C43D087FEE5ED38

SSL Certificate Expiring Soon!
Your SSL certificate expires in 89 days.
Please renew your certificate before Jan 30 07:27:35 2026 GMT to avoid service interruption.

Content Management System

CMS Detected: WordPress

Active Theme: creo

Detected Plugins (3):

lightbox-photoswipe litespeed-cache search-filter-pro

Themes

Plugins

WordPress Security Analysis

FAILED

Learn about WordPress Security Analysis

XMLRPC.php Security Test FAILED

XMLRPC.php is accessible and vulnerable

HTTP Status: 200

Recommendation: Protect xmlrpc.php via firewall rules or disable it completely. Consider using security plugins or server-level blocking.

WP-Login.php Security Test FAILED

WP-Login page is accessible without CAPTCHA protection

HTTP Status: 200

Recommendation: Implement CAPTCHA protection on wp-login.php and consider using a firewall to block brute force attacks.

User Enumeration Test UNKNOWN

Unable to determine user enumeration status

Test Results:

Endpoint: https://creo-kancelaria.pl/wp-json/wp/v2/users

Status: UNKNOWN

Message: Unexpected status code: 406

HTTP Status: 406

Endpoint: https://creo-kancelaria.pl/?rest_route=/wp/v2/users

Status: PASSED

Message: Endpoint properly protected (HTTP 401)

HTTP Status: 401

Recommendation: Investigate the WordPress REST API configuration and ensure proper security measures are in place.

Failed Security Tests:

XMLRPC
WP-Login

Request Assistance

Security Headers Analysis

Need help understanding security headers? View our comprehensive documentation to learn about each header and how to implement them.

Present Security Headers

No security headers detected

Missing Security Headers

Strict-Transport-Security

X-Content-Type-Options

X-Frame-Options

X-XSS-Protection

Referrer-Policy

Content-Security-Policy

Permissions-Policy

Cross-Origin-Embedder-Policy

Cross-Origin-Opener-Policy

Cross-Origin-Resource-Policy

Request Assistance

External JavaScripts Detected

Only scripts from different domains are shown

Domain	Script URL	Type
www.googletagmanager.com	`https://www.googletagmanager.com/gtm.js`	Inline Reference

Malware Analysis Details

Suspicious Patterns Detected

Suspicious document.write

Dynamic content injection that could be used maliciously

Severity: LOW

Matches Found: 1

Sample Matches:

document.write(new Date()

Recommendations

Review and clean suspicious HTML patterns
Consider using a Web Application Firewall (WAF)

Request Assistance

HTTP Headers

Learn about HTTP Headers

HTTP Response Code

200 OK - Request successful

HTTP Protocol Version

Excellent! Your website is using HTTP/2

Your website is using a modern HTTP protocol version, which provides better performance and security features.

Information Disclosure: Server Version

Header: server
Value: LiteSpeed

Server Type: LiteSpeed

The Server header reveals server version information, which can be used by attackers to identify vulnerabilities.

Gzip Compression Enabled 👍

Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.

Header	Value
`date`	`Sat, 01 Nov 2025 14:53:33 GMT`
`etag`	`"3406-1761919328;gz"`
`link`	`<https://creo-kancelaria.pl/wp-json/>; rel="https://api.w.org/", <https://creo-kancelaria.pl/wp-json/wp/v2/pages/78>; rel="alternate"; title="JSON"; type="application/json", <https://creo-kancelaria.pl/>; rel=shortlink`
`vary`	`Accept-Encoding,User-Agent`
`server`	`LiteSpeed`
`alt-svc`	`h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"`
`content-type`	`text/html; charset=UTF-8`
`http_version`	`HTTP/2`
`content-length`	`36056`
`content-encoding`	`gzip`
`x-litespeed-cache`	`hit`
`x-dns-prefetch-control`	`on`

Service Disclaimer

Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.

Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.

Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.

Support Our Service

Help us keep this tool free and improve it further

Buy us a Coffee Make a Donation via PayPal