• Resolved hostfusion

    (@hostfusion)


    Hello,

    the latest plugin update, has a url marked bad url by Wordfence:

    Filename: /wp-content/plugins/ninjascanner/index.php
    File Type: Not a core, theme, or plugin file from ww.wp.xz.cn.
    Bad URL: hxxx://malware.testing.google.test/testing/malware/
    Details: This file contains a URL that is a suspected phishing site that is currently listed on Google’s list of known phishing sites. The URL is: hxxx://malware.testing.google.test/testing/malware/

    I have reviewed the file and indeed this url is in the code

    $body = array(
    ‘body’ => ‘{
    “threatInfo”: {
    “threatTypes”: [“MALWARE”, “SOCIAL_ENGINEERING”],
    “platformTypes”: [“ANY_PLATFORM”],
    “threatEntryTypes”: [“URL”],
    “threatEntries”: [
    {“url”: “hxxx://malware.testing.google.test/testing/malware/”},

    Would you please verify this issue ?

    Regards

    Pedro Santos

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Hi,

    It’s a false positive: malware.testing.google.test/testing/malware is the Google Safe Browsing API test URL.
    If you want to test NS files integrity, I don’t recommend to use another scanner, but use its own “Advanced Users Settings > Always verify NinjaScanner’s files integrity before starting a scan.” option instead.

    Thread Starter hostfusion

    (@hostfusion)

    Hi,

    thanks a lot

    regards

    Pedro Santos

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Bad URL’ is closed to new replies.