Analysis Results

Export PDF Report Rescan Website Analyze Another Website

http://petresort.hu

Analyzed on January 14, 2026, 5:09 p.m. Click "Rescan Website" to get the latest data

Analysis Successful

Network Information

IP Address: 172.67.170.28

IP WHOIS Information:

ASN: 13335
ASN Description: CLOUDFLARENET, US
Country: US
Description: Cloudflare, Inc.
CIDR: 172.64.0.0/13

Ping Test Check AbuseIPDB Other Websites on Same IP

Domain Information

DNS Records

Learn about DNS Records

A Records (IPv4 Addresses)

Domain	IP Address
`petresort.hu`	104.21.28.3
`petresort.hu`	172.67.170.28

MX Records (Mail Servers)

Priority	Mail Server
0	`mail.petresort.hu.`

TXT Records

Domain	Text Record
`petresort.hu`	`"v=spf1 +a +mx +ip4:208.115.224.194 include:relay.mailbaby.net ~all"`
`petresort.hu`	`"google-site-verification=lgSBVmW2mGH9Sf0mQVUUpYLbvi3clSvknsCslIavhoA"`

WWW Subdomain Records

Subdomain	Type	Value
`www.petresort.hu`	A	`172.67.170.28`
`www.petresort.hu`	A	`104.21.28.3`

Services Detected (1 found)

Google Search Console

Google Search Console services detected

Learn More

View DNS History on DNS Archive

Check GeoIP Blocking

Blocklisting Status

Learn about Blocklisting Status

Overall Status: CLEAN No blocklisting detected

Services Checked: 2

VirusTotal: CLEAN

Domain is clean according to 0 scanners
No threats detected by any security scanner

Google Safe Browsing: CLEAN

Domain is not blocklisted by Google Safe Browsing
No threats detected

Hosting Information

Provider: Cloudflare (high confidence)

Detection Method: HTTP Headers

Matched Headers:

server: cloudflare
cf-ray: 9bdebe0b4f4870fe-atl

Company Information:

Global CDN and security provider offering DDoS protection, SSL certificates, and performance optimization services.

Website

Portal

Contact:

Social Media:

Content Management System

CMS Detected: WordPress

Active Theme: bricks-child

Detected Plugins (2):

litespeed-cache wp-booking-system-premium

Themes

Plugins

WordPress Security Analysis

FAILED

Learn about WordPress Security Analysis

XMLRPC.php Security Test FAILED

XMLRPC.php is accessible and vulnerable

HTTP Status: 200

Recommendation: Protect xmlrpc.php via firewall rules or disable it completely. Consider using security plugins or server-level blocking.

WP-Login.php Security Test PASSED

WP-Login page is not accessible (HTTP 403)

HTTP Status: 403

Recommendation: WP-Login page is properly protected.

User Enumeration Test PASSED

User enumeration is properly protected

Test Results:

Endpoint: http://petresort.hu/wp-json/wp/v2/users

Status: PASSED

Message: Endpoint properly protected (HTTP 401)

HTTP Status: 401

Endpoint: http://petresort.hu/?rest_route=/wp/v2/users

Status: PASSED

Message: Endpoint properly protected (HTTP 401)

HTTP Status: 401

Recommendation: WordPress REST API user enumeration is properly secured.

Failed Security Tests:

XMLRPC

Request Assistance

Security Headers Analysis

Need help understanding security headers? View our comprehensive documentation to learn about each header and how to implement them.

Present Security Headers

No security headers detected

Missing Security Headers

Strict-Transport-Security

X-Content-Type-Options

X-Frame-Options

X-XSS-Protection

Referrer-Policy

Content-Security-Policy

Permissions-Policy

Cross-Origin-Embedder-Policy

Cross-Origin-Opener-Policy

Cross-Origin-Resource-Policy

Request Assistance

HTTP Headers

Learn about HTTP Headers

HTTP Response Code

200 OK - Request successful

HTTP Protocol Version

Excellent! Your website is using HTTP/2

Your website is using a modern HTTP protocol version, which provides better performance and security features.

Security Protection Detected

The site is using Cloudflare CDN & WAF 👍

Information Disclosure: Server Version

Header: x-powered-by
Value: PHP/8.3.28

Server Type: PHP

The X-Powered-By header reveals server version information, which can be used by attackers to identify vulnerabilities.

Gzip Compression Enabled 👍

Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.

Header	Value
`nel`	`{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}`
`date`	`Wed, 14 Jan 2026 17:09:40 GMT`
`vary`	`Accept-Encoding`
`cf-ray`	`9bdebe0b4f4870fe-ATL`
`server`	`cloudflare`
`alt-svc`	`h3=":443"; ma=86400`
`report-to`	`{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jVGltYzcJDORMnP2KpNfN835Cwu4fkUKjHYlN8ZTPqz0RzdmQcbCNrvyZMRufBXsPGe303tccvijXDOcItEjNptpBxVgloDVo5Nhhg%3D%3D"}]}`
`content-type`	`text/html; charset=UTF-8`
`http_version`	`HTTP/2`
`x-powered-by`	`PHP/8.3.28`
`cf-cache-status`	`DYNAMIC`
`content-encoding`	`gzip`
`x-litespeed-cache`	`hit`
`x-turbo-charged-by`	`LiteSpeed`
`x-dns-prefetch-control`	`on`

Service Disclaimer

Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.

Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.

Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.

Support Our Service

Help us keep this tool free and improve it further

Buy us a Coffee Make a Donation via PayPal