URL: https://nstarfinance.com/ [67.202.92.20]
Started: Thu Sep 11 13:58:14 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - X-Powered-By: PHP/7.4.33
 |  - Server: LiteSpeed
 |  - WPX: 1
 |  - alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://nstarfinance.com/robots.txt
 | Interesting Entries:
 |  - /wp-admin/
 |  - /wp-admin/admin-ajax.php
 |  - */feed/
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://nstarfinance.com/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

The external WP-Cron seems to be enabled: https://nstarfinance.com/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299

WordPress version 6.8.2 identified (Latest, released on 2025-07-15).
 | Found By: Query Parameter In Upgrade Page (Aggressive Detection)
 |  - https://nstarfinance.com/wp-includes/css/dashicons.min.css?ver=6.8.2
 |  - https://nstarfinance.com/wp-includes/css/buttons.min.css?ver=6.8.2
 |  - https://nstarfinance.com/wp-admin/css/forms.min.css?ver=6.8.2
 |  - https://nstarfinance.com/wp-admin/css/l10n.min.css?ver=6.8.2
 |  - https://nstarfinance.com/wp-admin/css/install.min.css?ver=6.8.2

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Thu Sep 11 13:59:10 2025
Requests Done: 44
Cached Requests: 6
Data Sent: 10.374 KB
Data Received: 1.806 MB
Memory used: 164.605 MB
Elapsed time: 00:00:55

Scan Aborted: Max Scan Duration Reached