Domain Information
WordPress Version: 7.0.4
Theme: santi 1.2.0· 100% conf. (theme used by 35 domains)
Last Checked: 2026-09-09 16:53:00
HTTPS: Yes
Server: nginx
Response time (TTFB): 1,607 ms slow
Hosting: Hetzner Online GmbH (AS24940)
IP address: 116.202.162.xxx
PHP version: 7.4.33 — end-of-life, no security updates
Plugins (12)
| Plugin | Version | Used By |
|---|---|---|
| click-to-chat-for-whatsapp | — | 56,886 |
| ewww-image-optimizer | — | 75,771 |
| gtranslate | 3.1.1· 60% conf. | 118,445 |
| mwt-addons | — | 542 |
| official-facebook-pixel | — | 37,816 |
| responsive-vector-maps | 2.0.3· 60% conf. | 636 |
| rev-slider | 6.2.23· 85% conf. | 370 |
| sassy-social-share | — | 26,534 |
| unyson | — | 6,861 |
| wp-gdpr-compliance | — | 12,052 |
| wp-rocket | — | 315,051 |
| wp-user-avatar | 4.17.1· 85% conf. | 24,467 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.