Phasing alert re: easy fancy box url

Hi Barb, the readme.txt file is harmless in the context of your WordPress installation.

I’ll investigate why Wordfence seems to think the site of one of the translators is a phishing site. What is the exact message from Wordfence?

I received the same alert on 5/13:

This email was sent from your website [redacted] by the Wordfence plugin.
Wordfence found the following new issues on [redacted].
Alert generated at Friday 13th of May 2016 at 04:46:25 PM
Critical Problems:
* File contains suspected phishing URL: /home/[redacted]/public_html/wp-content/plugins/easy-fancybox/readme.txt

Thank you

This email was sent from your website “[redacted]” by the Wordfence plugin.
Wordfence found the following new issues on “[redacted]”.
Alert generated at Friday 13th of May 2016 at 11:18:58 PM
Critical Problems:
* File contains suspected phishing URL: /[redacted]/[redacted]/public_html/[redacted]/wp-content/plugins/easy-fancybox/readme.txt

OK thanks for the feedback. I’ll ask the Wordfence people what’s going on…

@all – According to the Wordfence people, the URL should not be causing any notifications any more. Are you using the latest version of Wordfence? And does the message still appear?

I haven’t seen it again, it was the one time. Yes, everything is up-to-date.

This problem reoccurred today 23/6/2016. al-badar.net in the readme.txt file is classed by Google Safe Browsing as a phishing URL. https://www.google.com/transparencyreport/safebrowsing/diagnostic/

Using https://www.virustotal.com this URL is also classed as phishing by BitDefender and Fortinet ( + of course google)

The impact of course is that Wordfrence is again showing this as a critical problem during its scan

Thanks for reporting. Even though the address in the readme.txt is harmless, the URL will be removed in the next version.

I had the same issue.