Analysis Results
http://wpnicaragua.org
Analyzed on January 15, 2026, 6:30 a.m. Click "Rescan Website" to get the latest data
Analysis SuccessfulMALWARE DETECTED!
Severity Level: MEDIUM
- Found 1 suspicious pattern(s)
DNS Records
A Records (IPv4 Addresses)
| Domain | IP Address |
|---|---|
wpnicaragua.org |
35.212.30.30 |
MX Records (Mail Servers)
| Priority | Mail Server |
|---|---|
| 5 | alt1.aspmx.l.google.com. |
| 1 | aspmx.l.google.com. |
| 10 | alt4.aspmx.l.google.com. |
| 10 | alt3.aspmx.l.google.com. |
| 5 | alt2.aspmx.l.google.com. |
TXT Records
| Domain | Text Record |
|---|---|
wpnicaragua.org |
"google-site-verification=ujuP3iaCQiULySIXzj6i9rSDdHQpwlPj_4RCINvs8Lk" |
wpnicaragua.org |
"google-site-verification=QZmqBcD1w7tigtaeyOVWNkjCYp-pk1YbCuYIgGzgt8I" |
wpnicaragua.org |
"v=spf1 +a +mx +ip4:35.212.86.228 include:wpnicaragua.org.spf.auto.dnssmarthost.net ~all" |
WWW Subdomain Records
| Subdomain | Type | Value |
|---|---|---|
www.wpnicaragua.org |
A | 35.212.30.30 |
Services Detected (2 found)
Blocklisting Status
No threats detected by any security scanner
No threats detected
Hosting Information
server: nginx
Content Management System
Themes
1
Plugins
6
WordPress Security Analysis
FAILEDXMLRPC.php Security Test UNKNOWN
XMLRPC.php returned unexpected status code: 405
HTTP Status: 405
WP-Login.php Security Test FAILED
WP-Login page is accessible without CAPTCHA protection
HTTP Status: 200
User Enumeration Test PASSED
User enumeration is properly protected
Endpoint: http://wpnicaragua.org/wp-json/wp/v2/users
Status: PASSED
Message: Endpoint properly protected (HTTP 401)
HTTP Status: 401
Endpoint: http://wpnicaragua.org/?rest_route=/wp/v2/users
Status: PASSED
Message: Endpoint properly protected (HTTP 401)
HTTP Status: 401
Failed Security Tests:
- WP-Login
Security Headers Analysis
Present Security Headers
No security headers detected
External JavaScripts Detected
Only scripts from different domains are shown| Domain | Script URL | Type |
|---|---|---|
| connect.facebook.net |
https://connect.facebook.net/en_US/fbevents.js
|
Inline Reference |
Malware Analysis Details
Suspicious Patterns Detected
Suspicious eval usage
Use of eval() function which can execute arbitrary code
Severity: MEDIUM
Matches Found: 1
Sample Matches:
eval(event.detail.apiResponse.fb_pxl_code)
Recommendations
- Review and clean suspicious HTML patterns
- Consider using a Web Application Firewall (WAF)
HTTP Headers
HTTP Response Code
200 OK - Request successfulHTTP Protocol Version
Your website is using a modern HTTP protocol version, which provides better performance and security features.
Information Disclosure: Server Version
Header: server
Value: nginx
Server Type: Nginx
The Server header reveals server version information, which can be used by attackers to identify vulnerabilities.Gzip Compression Enabled 👍
Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.
| Header | Value |
|---|---|
date |
Thu, 15 Jan 2026 06:30:37 GMT |
link |
<https://wpnicaragua.org/wp-json/>; rel="https://api.w.org/" |
vary |
Accept-Encoding |
server |
nginx |
host-header |
8441280b0c35cbc1147f8ba998a563a7 |
content-type |
text/html; charset=UTF-8 |
http_version |
HTTP/2 |
x-proxy-cache |
HIT |
x-httpd-modphp |
1 |
x-tec-api-root |
https://wpnicaragua.org/wp-json/tribe/events/v1/ |
content-encoding |
gzip |
x-tec-api-origin |
https://wpnicaragua.org |
x-tec-api-version |
v1 |
Service Disclaimer
Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.
Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.
Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.
Support Our Service
Help us keep this tool free and improve it further