Domain Security Report: a*p*i*n*e*o*r*a*.com

Domain Information

WordPress Version: 7.1

Theme: diyblog 1.0· 100% conf.

Last Checked: 2026-09-10 23:37:02

HTTPS: Yes

Server: nginx

Response time (TTFB): 1,379 ms slow

Hosting: Oracle Corporation (AS31898)

IP address: 162.241.252.xxx

Plugins (17)

Plugin	Version	Used By
all-in-one-seo-pack	5.0.1.1· 60% conf.	84,480
block-options	—	5,282
bluehost-wordpress-plugin	4.19.1· 60% conf.	186,490
contact-form-7	6.1.7· 85% conf.	1,694,402
editorplus	—	1,426
elementor	4.2.4· 85% conf.	1,689,719
google-analytics-for-wordpress	11.2.0· 60% conf.	194,301
link-whisper	—	5,831
newsletter	9.3.7· 85% conf.	44,853
penci-portfolio	1.0· 60% conf.	2,327
penci-recipe	3.3· 85% conf.	2,720
penci-review	1.0· 85% conf.	3,171
penci-shortcodes	5.3· 60% conf.	4,226
penci-text-to-speech	1.1· 85% conf.	331
responsive-block-editor-addons	2.2.8· 85% conf.	495
signature-field-with-contact-form-7	—	59
social-pug	1.36.3.1· 60% conf.	8,534

Security Headers

Grade F

6 missing headers

Missing headers:

Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
Content-Security-Policy (CSP) — Prevents XSS attacks ?
X-Content-Type-Options — Prevents MIME sniffing ?
X-Frame-Options — Prevents clickjacking ?
Referrer-Policy — Controls referrer information ?
Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Other WordPress domains on this IP (25+)

These WordPress domains are served from the same IP (162.241.252.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.