Domain Security Report: o*e*a*t*c*e*-*t*a*t*.com

Domain Information

WordPress Version: 7.1

Theme: carafity 1.2.2· 100% conf. (theme used by 19 domains)

Last Checked: 2026-09-09 08:51:03

HTTPS: Yes

Server: Apache

Response time (TTFB): 1,378 ms slow

Hosting: IONOS SE (AS8560)

IP address: 217.160.0.xxx

PHP version: 8.3.33

Plugin	Version	Used By
advanced-product-fields-for-woocommerce-extended	2.7.25· 85% conf.	976
complianz-gdpr	—	250,139
contact-form-7	6.1.7· 85% conf.	1,707,342
custom-facebook-feed	4.12.0· 85% conf.	39,942
custom-twitter-feeds	2.8.0· 85% conf.	31,268
elementor	4.2.4· 85% conf.	1,707,286
elementor-pro	4.2.3· 85% conf.	1,017,560
google-site-kit	—	258,056
header-footer-elementor	2.9.4· 85% conf.	197,317
instagram-feed	6.13.0· 85% conf.	217,663
product-input-fields-for-woocommerce	2.0.3· 60% conf.	370
reviews-feed	—	19,851
revslider	6.6.14· 85% conf.	586,216
safe-svg	—	44,880
weglot	6.2· 85% conf.	15,374
woo-smart-compare	6.6.0· 85% conf.	4,447
woo-smart-quick-view	4.3.5· 85% conf.	5,971
woo-smart-wishlist	6.0.9· 85% conf.	7,181
woo-variation-swatches	2.4.0· 85% conf.	30,805
woocommerce	11.1.0· 85% conf.	789,108
wp-consent-api	2.0.1· 60% conf.	52,365

Grade F

6 missing headers

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

These WordPress domains are served from the same IP (217.160.0.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.