WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for t*t*l*h*a*h.de

Domain Information

WordPress Version: 6.9.7

Theme: leitmotif 1.4· 100% conf. (theme used by 63 domains)

Last Checked: 2026-09-11 05:03:31

HTTPS: Yes

Response time (TTFB): 802 ms

Hosting: Mittwald CM Service GmbH & Co. KG (AS15817)

IP address: 185.215.158.xxx

Plugins (19)

Plugin Version Used By
borlabs-cookie 2.3.7· 85% conf. 61,737
contact-form-7 6.1.6· 85% conf. 1,694,402
crowdfunding-for-woocommerce 3.1.12· 85% conf. 37
download-monitor 5.2.1· 60% conf. 20,010
eventon 4.0.5· 85% conf. 7,418
eventon-events-map 139
google-site-kit 259,214
improved-variable-product-attributes 4.9.5· 60% conf. 257
js_composer 6.9.0· 85% conf. 400,654
leitmotif-core 68
name-directory 735
page-links-to 3.3.7· 60% conf. 55,629
revslider 6.6.5· 85% conf. 580,456
side-cart-woocommerce 2.5.5· 85% conf. 8,766
sold-out-badge-for-woocommerce 1,333
woocommerce 10.9.3· 85% conf. 781,569
woocommerce-germanized 3.20.5· 60% conf. 11,947
wp-sponsors 3.5.0· 85% conf. 440
wp-timelines 3.2· 60% conf. 1,511

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Other WordPress domains on this IP (4)

These WordPress domains are served from the same IP (185.215.158.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.