Analysis Results
https://datawords.com
Analyzed on July 29, 2025, 10:08 p.m. Click "Rescan Website" to get the latest data
Analysis SuccessfulMALWARE DETECTED!
Severity Level: MEDIUM
- Found 1 suspicious pattern(s)
DNS Records
A Records (IPv4 Addresses)
Domain | IP Address |
---|---|
datawords.com |
162.159.135.42 |
MX Records (Mail Servers)
Priority | Mail Server |
---|---|
1 | datawords-com.mail.protection.outlook.com. |
TXT Records
Domain | Text Record |
---|---|
datawords.com |
"MS=ms73417323" |
datawords.com |
"v=spf1 include:amazonses.com include:spf.protection.outlook.com include:_spf.atlassian.net include:_spf.google.com include:spf.mandrillapp.com include:144958027.spf01.hubspotemail.net -all" |
datawords.com |
"airtable-verification=b0be7f0a727a487d6557367e3dc24df8" |
datawords.com |
"apple-domain-verification=2Asuwg6pCvo7B253" |
datawords.com |
"atlassian-domain-verification=oRcJ3Dhgf7E7OW68DWdTlAivTq/2bftIUQuySNiav/Q1a9wk0ZT1jzzOc1aYLB4k" |
datawords.com |
"google-site-verification=hMiF_rDpmg6sonRJq0yOSCYSYMN5fsgjeA3Awmnqvrg" |
datawords.com |
"atlassian-domain-verification=ac3Sdi2PBm0vWigOed6AGKs8Oxy7aRcU4XBFgCDop0fFZmjKWPlna6HKj1iu5UyU" |
datawords.com |
"Notion_verify_JHtGCU1w10K0JC6YuLFaaC94zbnJ2Qxdey2jD09kXx7W0Bz3WbDrsL0DGdh0cBJg41kKL8" |
datawords.com |
"docusign=501589c5-767a-4343-a98a-54c9346e1191" |
datawords.com |
"atlassian-domain-verification=uNtCudL0JKOGV9vD1FuB2maLfkmbbKKtfphS7EwYNhVnLZNIv3ON8nngMe9sQV/A" |
datawords.com |
"fe5+izxInLihhNxBKpcpYe6MpAnFSM0pjwZVsW/J5mI=" |
datawords.com |
"atlassian-domain-verification=bAy/WUgwKV1appFmk2PHRkYTVyokg8/mp/iXsbaQgmLzMuuhA3RR3vFfnFWaXjz6" |
datawords.com |
"google-site-verification=otfnn1BEWfWmXZ1YvCMCo_A_VOYjPAhidX-58ywa5TY" |
datawords.com |
"google-site-verification=shIRrsIirF1MPdGg5j0qAnMkbSbdaVVF2l5NZYquBbw" |
WWW Subdomain Records
Subdomain | Type | Value |
---|---|---|
www.datawords.com |
A | 162.159.135.42 |
Services Detected (9 found)
Blocklisting Status
No threats detected
No threats detected by any security scanner
Hosting Information
x-kinsta-cache: hit
ki-cache-type: edge
ki-cf-cache-status: hit
ki-edge: v=21.1.1;mv=5.0.10
SSL/TLS Security
- Certificate Type: DV (Domain Validated - Basic Security)
- Subject: datawords.com
-
Certificate Authority (CA):
WE1
Google Trust Services
US - Valid From: Jun 18 07:04:53 2025 GMT
- Valid Until: Sep 16 08:04:47 2025 GMT
- Serial Number:
90CCF4909ABDEE271382E56BBA95CCE0
Your SSL certificate expires in 47 days.
Please renew your certificate before Sep 16 08:04:47 2025 GMT to avoid service interruption.
Content Management System
Themes
0
Plugins
10
WordPress Security Analysis
FAILEDXMLRPC.php Security Test PASSED
XMLRPC.php is properly protected (HTTP 403)
HTTP Status: 403
WP-Login.php Security Test FAILED
WP-Login page is accessible without CAPTCHA protection
HTTP Status: 200
User Enumeration Test PASSED
User enumeration is properly protected
Endpoint: https://datawords.com/wp-json/wp/v2/users
Status: PASSED
Message: Endpoint accessible but no user data returned
HTTP Status: 200
Endpoint: https://datawords.com/?rest_route=/wp/v2/users
Status: PASSED
Message: Endpoint accessible but no user data returned
HTTP Status: 200
Failed Security Tests:
- WP-Login
Security Headers Analysis
External JavaScripts Detected
Only scripts from different domains are shownDomain | Script URL | Type |
---|---|---|
cdnjs.cloudflare.com |
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
|
External |
js-eu1.hs-scripts.com |
https://js-eu1.hs-scripts.com/144958027.js?integration=WordPress&ver=11.3.6
|
External |
js-eu1.hsforms.net |
https://js-eu1.hsforms.net/forms/embed/v2.js?ver=11.3.6
|
External |
www.google.com |
https://www.google.com/recaptcha/api.js?render=6LdK1XcqAAAAAJAOG6MM0wirbIuTARusJtlUdqFP
|
External |
www.googletagmanager.com |
https://www.googletagmanager.com/gtm.js
|
Inline Reference |
Malware Analysis Details
Suspicious Patterns Detected
Suspicious window.open
Window opening that could be used for popup spam
Severity: MEDIUM
Matches Found: 1
Sample Matches:
window.open(e,"popUpWindow","height=400,width=600,left=400,top=100,resizable,scrollbars,toolbar=0,personalbar=0,menubar=no,location=no,directories=no,status")
Recommendations
- Review and clean suspicious HTML patterns
- Consider using a Web Application Firewall (WAF)
HTTP Headers
HTTP Response Code
200 OK - Request successfulSecurity Protection Detected
Gzip Compression Enabled 👍
Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.
Header | Value |
---|---|
Date |
Tue, 29 Jul 2025 22:07:51 GMT |
Content-Type |
text/html; charset=UTF-8 |
Transfer-Encoding |
chunked |
Connection |
keep-alive |
CF-Ray |
966fee7b2a9a6de9-DFW |
CF-Cache-Status |
HIT |
Age |
50 |
Cache-Control |
public, max-age=0, s-maxage=3600 |
Last-Modified |
Tue, 29 Jul 2025 22:01:53 GMT |
Link |
<https://datawords.com/wp-json/>; rel="https://api.w.org/", <https://datawords.com/wp-json/wp/v2/pages/29477>; rel="alternate"; title="JSON"; type="application/json", <https://datawords.com/>; rel=shortlink |
Vary |
Accept-Encoding |
ki-Cache-Tag |
370b6f8f-edb6-40d8-a1d4-57f7770a9a23,f3b6449a435e2c667489881b29d919f22b2956c756220c08538cef4237ad55ca |
ki-cache-type |
Edge |
Ki-CF-Cache-Status |
HIT |
ki-edge |
v=21.1.1;mv=5.0.10 |
X-Content-Type-Options |
nosniff |
X-Edge-Location-Klb |
1 |
x-kinsta-cache |
HIT |
Set-Cookie |
__cf_bm=bN7AthxtyG5XzG8Gq4JnyAy0Er8VoaLK_iUse9Llm7U-1753826871-1.0.1.1-RkxkTvOZ4Hd31.6Wij3dMKjUWFqH6GXVURMukcc2M4prw_jhLIiW4f96xq5wHWRdY83ZU4ndfYZylQLgi_01bIyP0RuFcnYNS5RzWVQDdbk; path=/; expires=Tue, 29-Jul-25 22:37:51 GMT; domain=.datawords.com; HttpOnly; Secure; SameSite=None |
Report-To |
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PkbEJmWcOLHx2At%2FUXLddgIsf8%2Bwr1DoK3o8F%2BayCVaQBDAJbTLpaB62qRZDjOsUxNRZcAyEYYpTdHtuLkE%2Bu8b8gXGib1qA5EhBGHsiYk8waP%2FRlcWBmI6SA1lS1OA%3D"}],"group":"cf-nel","max_age":604800} |
NEL |
{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} |
Server |
cloudflare |
Content-Encoding |
gzip |
alt-svc |
h3=":443"; ma=86400 |
Service Disclaimer
Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.
Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.
Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.
Support Our Service
Help us keep this tool free and improve it further