Domain Security Report: c*a*l*d*o*.com

Domain Information

WordPress Version: 7.1

Theme: astra 4.12.5· 100% conf. (theme used by 393,021 domains)

Last Checked: 2026-09-11 19:54:13

HTTPS: Yes

Server: Apache

Response time (TTFB): 1,487 ms slow

Hosting: IONOS SE (AS8560)

IP address: 217.160.0.xxx

PHP version: 8.4.24

Plugin	Version	Used By
astra-addon	4.13.8· 85% conf.	89,452
astra-sites	—	105,680
audio-player-block	—	106
elementor	4.2.3· 85% conf.	1,689,719
elementor-pro	4.2.2· 85% conf.	1,005,817
essential-widgets	3.2.1· 85% conf.	2,347
facebook-for-woocommerce	3.7.6· 85% conf.	25,660
gdpr-cookie-compliance	5.1.0· 85% conf.	65,775
google-listings-and-ads	—	24,098
html5-audio-player	2.8.3· 85% conf.	3,092
load-more-products-for-woocommerce	3.2.2· 85% conf.	2,665
mailchimp-for-woocommerce	—	42,485
mailchimp-for-wp	4.14.0· 60% conf.	77,012
media-playback-speed	1.2.2· 60% conf.	96
modern-cart	1.0.10· 85% conf.	923
official-facebook-pixel	5.2.2· 60% conf.	37,816
presto-player	—	8,622
product-catalog-mode-for-woocommerce	2.1.4· 85% conf.	31
recaptcha-woo	1.0· 60% conf.	9,774
sensei-lms	—	1,367
sensei-pro	1.24.9· 85% conf.	277
simple-ajax-chat	—	318
woocommerce	11.1.0· 85% conf.	781,569
woocommerce-ajax-filters	3.2.2· 85% conf.	6,460
woocommerce-gateway-amazon-payments-advanced	—	1,164
woocommerce-menu-bar-cart	3.1.0· 85% conf.	13,050
woocommerce-payments	—	101,077
woocommerce-paypal-payments	4.1.3· 85% conf.	33,200

Grade F

6 missing headers

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

These WordPress domains are served from the same IP (217.160.0.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.