Magex AI Bot Defender

magex-ai-bot-defender · by viktoriasantos · wordpress.org ↗ · SVN ↗

This plugin is closed on wordpress.org. Closed 2026-04-07. Reason: guideline-violation.

Active installs: —
Current version: 1.6.2
Added: 2025-11-21
Last updated: —
First seen by beacon: 2mo ago
Total downloads: —

Audits (1)

Malicious Audit #47 baseline — → head 1.5.8 suspect viktoriasantos 18d ago

A SiteGuarding burner that routes through the safetybis.com C2 — Tier B (undisclosed phone-home / proxy, no in-plugin RCE sink). Surfaced by the closed-plugin blob scan via siteguarding.com + safetybis.com references in includes/class-siteguarding-api.php.

Read full audit →

Alerts (0)

No open alerts.

Show 1 resolved alert

High closed_blob_scan Resolved · audited_malicious 2026-06-15 10:50:21 (18d ago)

Slug	magex-ai-bot-defender
Committer	viktoriasantos
First commit at	2025-11-21 17:03:44
Tier	`B`
Mechanism	undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink
Active installs	0
Explanation	SiteGuarding burner-fleet member surfaced by the closed-plugin blob scan (2026-06-15). Tier B. undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink

View raw JSON

{
    "slug": "magex-ai-bot-defender",
    "committer": "viktoriasantos",
    "first_commit_at": "2025-11-21 17:03:44",
    "tier": "B",
    "mechanism": "undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink",
    "active_installs": 0,
    "explanation": "SiteGuarding burner-fleet member surfaced by the closed-plugin blob scan (2026-06-15). Tier B. undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink"
}

SVN committers (2)

Accounts with actual commit access to magex-ai-bot-defender on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer	Member since	Commits	First commit	Latest commit
Magex AI Young account	2025-10-26	6	2025-12-06 · r3413006	2025-12-15 · r3420469
plugin-master	2007-03-09	1	2025-11-21 · r3400603	2025-11-21 · r3400603

Readme contributors (1)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor	Member since	SVN access	Status
Magex AI	2025-10-26	6 commits	Active

Versions (2 most recent)

Version	Released	Download
1.6.2	2025-12-15 · 6mo ago	—
1.5.8	2025-12-11 · 6mo ago	—