Domain Security Report: a*t*i*t*c*.io

Domain Information

WordPress Version: Unknown

Theme: astra 4.13.11· 60% conf. (theme used by 393,021 domains)

Last Checked: 2026-09-10 09:05:41

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 247 ms fast

Hosting: Cloudflare, Inc. (AS13335)

IP address: 104.26.8.xxx

Plugins (40)

Plugin	Version	Used By
ajax-search-for-woocommerce	1.34.2· 60% conf.	20,549
altair-bitcoin-block	—	0
ameliabooking	—	6,802
astra-addon	4.13.9· 85% conf.	89,452
auto-terms-of-service-and-privacy-policy	3.0.5· 60% conf.	16,071
back-in-stock-notifier-for-woocommerce	7.4.2· 85% conf.	4,411
blocks-animation	—	19,317
carousel-block	2.1.5· 85% conf.	4,891
christmasify	1.0.7· 60% conf.	398
conditional-payments-for-woocommerce-pro	3.5.1.pro· 60% conf.	192
cookie-notice	3.1.9· 60% conf.	142,031
customer-reviews-woocommerce	5.120.0· 85% conf.	11,262
customize-my-account-for-woocommerce	4.5.0· 60% conf.	932
elementor	4.2.4· 85% conf.	1,689,719
embedpress	—	18,018
essential-addons-for-elementor-lite	6.8.3· 85% conf.	250,728
essential-blocks	6.4.3· 85% conf.	22,520
facebook-for-woocommerce	3.7.6· 85% conf.	25,660
fluentform	6.2.13· 60% conf.	56,499
google-listings-and-ads	—	24,098
gtranslate	3.1.2· 60% conf.	118,445
gutentor	—	4,474
header-footer-elementor	—	195,384
jetpack	—	402,304
mailchimp-for-woocommerce	—	42,485
mailchimp-for-wp	4.14.0· 60% conf.	77,012
pre-orders-for-woocommerce	2.3.1· 85% conf.	1,108
premium-addons-for-elementor	4.11.103· 60% conf.	78,139
reddit-for-woocommerce	—	2,605
sg-cachepress	7.8.2· 60% conf.	4,316
slicewp	1.2.11· 60% conf.	1,636
trustpilot-reviews	1.0· 85% conf.	6,052
ultimate-addons-for-gutenberg	2.20.3· 85% conf.	46,578
woocommerce	11.1.0· 85% conf.	781,569
woocommerce-gateway-paypal-powered-by-braintree	6.2.4· 85% conf.	935
woocommerce-google-analytics-integration	—	27,041
woocommerce-product-bundles	—	8,125
wp-job-manager	—	16,091
wp-nmi-gateway-pci-woocommerce	—	436
wp-rocket	—	315,051

Security Headers

Grade D

4 missing headers

Missing headers:

Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
Content-Security-Policy (CSP) — Prevents XSS attacks ?
X-Frame-Options — Prevents clickjacking ?
Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

No exposed files detected

Our automated scan did not detect any publicly-accessible sensitive files or critical misconfigurations on this domain.

However, this does not mean the site is completely secure. There are many other potential vulnerabilities that require deeper analysis:

Outdated themes or plugins
Outdated third-party scripts and software
Weak passwords and authentication
SQL injection vulnerabilities
Cross-site scripting (XSS) issues
Insecure server configurations
OS command injection vulnerabilities
Unprotected file uploads
...

Questions about your WordPress security? Reach out — we offer comprehensive security audits and can help identify hidden vulnerabilities.