URL: http://www.thevalleybusinessbroker.com/ [172.67.221.64] Started: Mon Nov 11 18:36:41 2024 Interesting Finding(s): Headers | Interesting Entries: | - x-powered-by: PHP/8.2.24 | - cf-cache-status: DYNAMIC | - Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJKgM3H642qoVsUep87GK%2BEHftN2LulILMVAZqV3AjAKI6PqBwTdneucVFfDgDQankgUXZDr5QMrNZdNm481WnQhrWyrfM3Iws9zMLStaYyvAj8VSVaVXzZeNF0Zm4Sju07IswykaYc4j1uyt08cXjSy"}],"group":"cf-nel","max_age":604800} | - NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} | - Server: cloudflare | - CF-RAY: 8e121b0cad984231-EWR | - alt-svc: h3=":443"; ma=86400 | - server-timing: cfL4;desc="?proto=TCP&rtt=1030&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=229&delivery_rate=0&cwnd=247&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" | Found By: Headers (Passive Detection) | Confidence: 100% robots.txt found: http://www.thevalleybusinessbroker.com/robots.txt | Interesting Entry: | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% XML-RPC seems to be enabled: http://www.thevalleybusinessbroker.com/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ WordPress readme found: http://www.thevalleybusinessbroker.com/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% The external WP-Cron seems to be enabled: http://www.thevalleybusinessbroker.com/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 Fingerprinting the version -: |==================== No WPScan API Token given, as a result vulnerability data has not been output. You can get a free API token with 25 daily requests by registering at https://wpscan.com/register Finished: Mon Nov 11 18:37:39 2024 Requests Done: 590 Cached Requests: 7 Data Sent: 181.86 KB Data Received: 23.146 MB Memory used: 160.727 MB Elapsed time: 00:00:57 Scan Aborted: Max Scan Duration Reached