Domain Information
WordPress Version: 7.1
Theme: hello-elementor 3.5.1· 100% conf. (theme used by 596,208 domains)
Last Checked: 2026-09-11 09:44:34
HTTPS: Yes
Server: Apache
Response time (TTFB): 4,084 ms slow
Hosting: OVH SAS (AS16276)
IP address: 87.98.231.xxx
PHP version: 8.3
Plugins (17)
| Plugin | Version | Used By |
|---|---|---|
| creame-whatsapp-me | 6.3.2· 85% conf. | 65,475 |
| dispensary-age-verification-old | 3.0.1· 85% conf. | 0 |
| easy-product-bundles-for-woocommerce | 6.20.2· 60% conf. | 744 |
| elementor | 4.2.4· 85% conf. | 1,678,767 |
| essential-addons-for-elementor-lite | 6.8.3· 85% conf. | 248,826 |
| flexible-shipping | 6.12.1.34· 60% conf. | 19,349 |
| mailchimp-for-woocommerce | — | 42,146 |
| minmax-quantity-for-woocommerce | 3.1.3· 60% conf. | 2,906 |
| pro-elements | 4.2.2· 85% conf. | 59,920 |
| redsyspur | 1.14.1· 60% conf. | 871 |
| safe-svg | — | 44,181 |
| woo-discount-rules | 2.6.17· 85% conf. | 16,717 |
| woo-out-of-stock-products | — | 253 |
| woocommerce | 11.1.0· 85% conf. | 776,792 |
| woocommerce-ajax-filters | 3.3· 85% conf. | 6,432 |
| woocommerce-google-analytics-integration | — | 26,784 |
| yith-woocommerce-quick-view | 2.18.0· 85% conf. | 7,659 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (87.98.231.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*r*c*a.org
- a*a*k*.com
- a*c*r*a*u*i*i*.com
- a*d*l*z*v*r*i*a*.com
- a*d*r*o*a*o*a*o*.com
- a*e*n*j*s*.com
- a*t*r*x*.com
- a*t*n*o*a*n*.com
- b*d*g*b*e*t*.es
- b*a*n*a*p*.com
- d*l*o*.com
- d*n*g*i*.com
- d*s*e*s*s*l*a.com
- e*u*i*e*s*d*l*c*c*n*.com
- e*o*t*r*a.com
- f*r*a*d*c*n*.es
- f*n*a*i*n*a*q*e*d*a*.org
- k*r*t*m*l*o*c*.com
- k*a*b*n.com
- k*m*y*v*n*o*.com
- m*h*n*i*d*.com
- m*r*a*d*s*n*a*a*a*i*a.com
- p*n*i*n*a*i*e*.com
- p*s*d*c*r*c*o*.com
- q*e*i*.es