Site Information
WordPress Version: 7.1
Theme: sparkling (used by 2,293 domains)
Last Checked: 2026-09-06 05:56:06
HTTPS: Yes
Server: Apache
Response time (TTFB): 1,151 ms slow
Hosting: OVH SAS (AS16276)
IP address: 54.36.31.145
PHP version: 8.0 — end-of-life, no security updates
Other WordPress sites on this IP (18)
These WordPress sites are served from the same IP (54.36.31.145) — usually shared hosting or the same owner. Domains are obfuscated, as everywhere on the site.
- a*a*o*p*a*e*c*.com
- a*a*a*d*u*.com
- a*a*o*a*a*e.com
- b*s.sn
- e*t*r*r*s*.com
- e*t*s.com
- h*l*i*k*n*k*.com
- k*l*-*r*h*t*c*u*e.com
- m*y*i*r*e*t*u*s.com
- n*t*i*i*n*b*.com
- r*d*i*g*1*.com
- r*e*a*.com
- r*n*4*y*u.com
- r*n*a*-*a*-*u*i*i*.com
- r*p*b*i*a*.com
- s*f*a*l*h*a*i.com
- t*e*h*u*e*c*f*e*s*o*.com
- v*r*c*o*.com
Plugins (6)
| Plugin | Used By |
|---|---|
| custom-facebook-feed | 40,258 |
| custom-twitter-feeds | 31,533 |
| google-site-kit | 253,816 |
| instagram-feed | 219,360 |
| reviews-feed | 20,010 |
| vk-blocks | 22,882 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.