WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for h*r*e*a*d*o*t*l*.com

Domain Information

WordPress Version: 7.1

Theme: onair2 (theme used by 522 domains)

Last Checked: 2026-09-07 03:33:04

HTTPS: Yes

Server: nginx

Response time (TTFB): 617 ms

Hosting: The Constant Company, LLC (AS20473)

IP address: 149.28.196.xxx

Plugins (6)

Plugin Version Used By
contact-form-7 1,698,348
js_composer 401,781
qt-ajax-pageload 508
qt-swipebox 891
qt-videogalleries 556
smart-slider-3 73,167

Security Headers

B
Grade B

1 missing header

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.