WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for ******.com

Publicly observed software, infrastructure, and security signals Last checked: 2026-10-18 18:16:14

Domain Information

WordPress Version: 7.1.3 No known vulnerabilities

Detected theme variations
4.4.1· 100% conf.
Used by 2,157 domains

Last Checked: 2026-10-18 18:16:14

HTTPS: Yes

Server: Apache

Response time (TTFB): 334 ms

Hosting: IONOS SE (AS8560)

IP address: 217.160.0.xxx

PHP version: 8.1.34 — end-of-life, no security updates

Plugins (0)

Versions are displayed when reliable observations are available.

No plugins found.

Security Findings

These findings combine public scan observations with advisories matching detected software versions. Version matches do not establish exploitation.

Other observed security findings

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Other WordPress domains on this IP (25+)

These WordPress domains are served from the same IP (217.160.0.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.

Show 17 more domains
Copyright 2026, tldwp.com. All rights reserved. Data Use License · WordPress maintenance or security needs? Reach out!
WordPress is a trademark of the WordPress Foundation. TLDWP is an independent project and is not affiliated with or endorsed by the WordPress Foundation or the WordPress open source project.