WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for b*o*e*a.shop

Domain Information

WordPress Version: 7.1

Theme: hello-elementor 3.4.5· 100% conf. (theme used by 596,208 domains)

Last Checked: 2026-09-10 18:49:57

HTTPS: Yes

Server: openresty

Response time (TTFB): 20,020 ms slow

Hosting: 23M GmbH (AS47447)

IP address: 91.216.248.xxx

PHP version: 8.3.33

Plugins (15)

Plugin Version Used By
cart-for-woocommerce 1.9.1· 60% conf. 3,381
dhl-for-woocommerce 3.9.6· 60% conf. 620
elementor 3.33.2· 85% conf. 1,689,719
elementor-pro 3.33.1· 85% conf. 1,005,817
flexible-shipping-ups 1,885
google-analytics-premium 9.6.0· 60% conf. 13,423
pixelyoursite 69,437
thrive-ovation 10.8.3· 60% conf. 3,150
translatepress-developer 1.1.1· 60% conf. 1,244
translatepress-multilingual 3.0.5· 85% conf. 64,960
trustpilot-reviews 1.0· 85% conf. 6,052
woocommerce 10.3.8· 85% conf. 781,569
woocommerce-b2b 3.0.3· 60% conf. 180
wp-marketing-automations 1.10.12.71· 60% conf. 2,779
wpc-composite-products 7.6.6· 85% conf. 1,242

Security Headers

D
Grade D

4 missing headers

Missing headers:

  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Other WordPress domains on this IP (25+)

These WordPress domains are served from the same IP (91.216.248.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.