Analysis Results
https://4d374ffa68.nxcli.io/
Analyzed on October 29, 2025, 4:58 p.m. Click "Rescan Website" to get the latest data
Analysis SuccessfulMALWARE DETECTED!
Severity Level: LOW
- Found 1 suspicious pattern(s)
Domain Information
DNS Records
A Records (IPv4 Addresses)
| Domain | IP Address |
|---|---|
4d374ffa68.nxcli.io |
192.190.221.84 |
Blocklisting Status
No threats detected by any security scanner
No threats detected
Hosting Information
server: nginx
SSL/TLS Security
- Certificate Type: DV (Domain Validated - Basic Security)
- Subject: 4d374ffa68.nxcli.io
-
Certificate Authority (CA):
R12
Let's Encrypt
US - Valid From: Sep 23 19:38:29 2025 GMT
- Valid Until: Dec 22 19:38:28 2025 GMT
- Serial Number:
06FCD09008341C481D24D498A95FC1691540
Your SSL certificate expires in 53 days.
Please renew your certificate before Dec 22 19:38:28 2025 GMT to avoid service interruption.
Content Management System
Security Headers Analysis
Present Security Headers
No security headers detected
Malware Analysis Details
Suspicious Patterns Detected
Suspicious document.write
Dynamic content injection that could be used maliciously
Severity: LOW
Matches Found: 1
Sample Matches:
document.write( '<script src="https://4d374ffa68.nxcli.io/wp-includes/js/dist/vendor/wp-polyfill-importmap.min.js?ver=1.8.2"></scr' + 'ipt>' )
Recommendations
- Review and clean suspicious HTML patterns
- Consider using a Web Application Firewall (WAF)
HTTP Headers
HTTP Response Code
200 OK - Request successfulHTTP Protocol Version
Your website is using a modern HTTP protocol version, which provides better performance and security features.
Information Disclosure: Server Version
Header: server
Value: nginx
Server Type: Nginx
The Server header reveals server version information, which can be used by attackers to identify vulnerabilities.Gzip Compression Enabled 👍
Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.
| Header | Value |
|---|---|
date |
Wed, 29 Oct 2025 16:58:21 GMT |
link |
<https://4d374ffa68.nxcli.io/wp-json/>; rel="https://api.w.org/", <https://4d374ffa68.nxcli.io/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://4d374ffa68.nxcli.io/>; rel=shortlink |
vary |
Accept-Encoding |
server |
nginx |
content-type |
text/html; charset=UTF-8 |
http_version |
HTTP/2 |
x-cache-nxaccel |
BYPASS |
x-ua-compatible |
IE=edge |
content-encoding |
gzip |
Service Disclaimer
Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.
Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.
Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.
Support Our Service
Help us keep this tool free and improve it further