Domain Security Report: c*o*c*l*t*d*m*d*c*.net

Domain Information

WordPress Version: 6.9.7

Theme: storefront 4.6.2· 100% conf. (theme used by 15,216 domains)

Last Checked: 2026-09-11 17:49:29

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 391 ms

Hosting: Cloudflare, Inc. (AS13335)

IP address: 162.159.135.xxx

Plugins (18)

Plugin	Version	Used By
complianz-gdpr-premium	—	37,043
flexible-shipping	6.8.0.2· 60% conf.	19,349
gtm-kit	2.16.3· 85% conf.	5,442
jetpack	—	396,328
mailchimp-for-woocommerce	—	42,146
product-pre-orders-for-woo	2.0.1· 85% conf.	325
sendcloud-shipping	2.4.5· 85% conf.	1,256
sitepress-multilingual-cms	—	201,124
storefront-hamburger-menu	1.2.2· 85% conf.	343
storefront-mega-menus	1.6.2· 60% conf.	357
storefront-parallax-hero	0.6.2· 60% conf.	305
storefront-powerpack	1.6.3· 85% conf.	980
storefront-product-hero	—	207
woo-fly-cart	6.2.2· 85% conf.	2,222
woocommerce	10.9.1· 85% conf.	776,792
woocommerce-payments	—	100,053
woocommerce-paypal-payments	4.1.0· 60% conf.	32,218
wpc-product-quantity	6.0.2· 85% conf.	292

Security Headers

Grade D

4 missing headers

Missing headers:

Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
Content-Security-Policy (CSP) — Prevents XSS attacks ?
X-Frame-Options — Prevents clickjacking ?
Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Other WordPress domains on this IP (25+)

These WordPress domains are served from the same IP (162.159.135.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.