WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for s*n*e*s*a*t*a*d.com

Domain Information

WordPress Version: 6.9.7

Theme: hueman (theme used by 5,152 domains)

Last Checked: 2026-09-08 09:18:10

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 4,080 ms slow

Hosting: Cloudflare, Inc. (AS13335)

IP address: 172.66.166.xxx

Plugins (15)

Plugin Version Used By
contact-form-7 1,707,342
download-monitor 20,211
embed-image-links 27
font-awesome-more-icons 318
page-links-to 56,521
pb-mailcrypt-antispam-email-encryption 124
shortcodes-ultimate 19,468
si-captcha-for-wordpress 4,319
siteorigin-panels 55,157
slimjetpack 100
syndicate-press 53
wordpress-countdown-widget 840
wp-polls 9,783
wp-pro-quiz 868
youtube-embed-plus 35,960

Security Headers

D
Grade D

4 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.