WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for o*n*.c*m.au

Domain Information

WordPress Version: Unknown

Theme: Divi 4.27.6· 60% conf. (theme used by 473,297 domains)

Last Checked: 2026-09-11 04:08:12

HTTPS: Yes

Server: nginx

Response time (TTFB): 1,626 ms slow

Hosting: Mammoth Media Pty Ltd (AS133159)

IP address: 103.100.38.xxx

Plugins (14)

Plugin Version Used By
master-slider 3.11.0· 60% conf. 12,415
paid-memberships-pro 3.6.5· 85% conf. 9,636
pmpro-customizations 1.0· 60% conf. 42
pmpro-toolkit 6.9.4· 85% conf. 287
qsm-export-results 2.1.0· 60% conf. 222
qsm-save-resume 48
quiz-custom 0
quiz-master-next 10.2.3· 60% conf. 1,985
rembiont-qsm-integration 1.0.0· 85% conf. 0
shortcodes-ultimate 7.5.0· 85% conf. 19,300
tablepress 3.3· 60% conf. 100,146
theme-custom 6.9.4· 60% conf. 0
theme-my-login 7.1.14· 85% conf. 10,294
username-changer 3.2.7· 60% conf. 2,533

Security Headers

C
Grade C

2 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.