Analysis Results

https://lacasadeltinte.com/

Analyzed on October 29, 2025, 6:30 p.m. Click "Rescan Website" to get the latest data

Analysis Successful
Network Information
IP Address: 208.85.18.211
IP WHOIS Information:
  • ASN: 20473
  • ASN Description: AS-VULTR, US
  • Country: US
  • Description: The Constant Company, LLC
  • CIDR: 208.85.16.0/21
Ping Test Check AbuseIPDB Other Websites on Same IP
Domain Information
  • Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
  • Created: January 12, 2023
  • Expires: January 12, 2026
  • Last Updated: January 07, 2025
  • Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  • Name Servers:
    • NS1.PAMBLY-DNS.COM
    • NS2.PAMBLY-DNS.NET
    • NS3.PAMBLY-DNS.ORG
    • NS4.PAMBLY-DNS.BIZ
DNS Records
Learn about DNS Records
A Records (IPv4 Addresses)
Domain IP Address
lacasadeltinte.com 208.85.18.211
MX Records (Mail Servers)
Priority Mail Server
0 lacasadeltinte.com.
TXT Records
Domain Text Record
lacasadeltinte.com "v=spf1 ip4:208.85.18.211 ip4:45.77.219.81 +a +mx include:relay.mailchannels.net ~all"
WWW Subdomain Records
Subdomain Type Value
www.lacasadeltinte.com A 208.85.18.211
Services Detected (1 found)
Mailchannels
Mailchannels

Mailchannels services detected

Learn More
View DNS History on DNS Archive
Check GeoIP Blocking
Blocklisting Status
Learn about Blocklisting Status
Overall Status: CLEAN No blocklisting detected
Services Checked: 2
VirusTotal: CLEAN
Domain is clean according to 0 scanners
No threats detected by any security scanner
Google Safe Browsing: CLEAN
Domain is not blocklisted by Google Safe Browsing
No threats detected
Hosting Information
Provider: Unknown (none confidence)
Detection Method: No match found
SSL/TLS Security
Learn about SSL/TLS Security
TLS Version: TLSv1.3
SSL Certificate:
  • Certificate Type: DV (Domain Validated - Basic Security)
  • Subject: *.lacasadeltinte.com
  • Certificate Authority (CA): R12
    Let's Encrypt
    US
  • Valid From: Sep 30 06:13:46 2025 GMT
  • Valid Until: Dec 29 06:13:45 2025 GMT
  • Serial Number: 057AE4ED613689CB974E07D95A40BBE07263
SSL Certificate Expiring Soon!
Your SSL certificate expires in 60 days.
Please renew your certificate before Dec 29 06:13:45 2025 GMT to avoid service interruption.
Content Management System
CMS Detected: WordPress
Active Theme: hello-elementor
Detected Plugins (14):
advanced-dynamic-pricing-for-woocommerce elementor elementor-pro essential-addons-for-elementor-lite essential-blocks share-cart-for-woocommerce tilopay woo-bought-together woo-smart-quick-view woocommerce woocommerce-google-analytics-integration woocommerce-product-addons woocommerce-product-bundles wt-woocommerce-related-products
Themes

1

Plugins

14

WordPress Security Analysis
FAILED
Learn about WordPress Security Analysis
XMLRPC.php Security Test FAILED

XMLRPC.php is accessible and vulnerable

HTTP Status: 200

Recommendation: Protect xmlrpc.php via firewall rules or disable it completely. Consider using security plugins or server-level blocking.
WP-Login.php Security Test FAILED

WP-Login page is accessible without CAPTCHA protection

HTTP Status: 200

Recommendation: Implement CAPTCHA protection on wp-login.php and consider using a firewall to block brute force attacks.
User Enumeration Test FAILED

User enumeration is possible via WordPress REST API

Test Results:

Endpoint: https://lacasadeltinte.com/wp-json/wp/v2/users

Status: FAILED

Message: User enumeration possible - 5 users found

HTTP Status: 200

Endpoint: https://lacasadeltinte.com/?rest_route=/wp/v2/users

Status: FAILED

Message: User enumeration possible - 5 users found

HTTP Status: 200

Users Found:
ID Name Slug Link
1 admin yfjctisy https://lacasadeltinte.com/author/yfjctisy/
5 Allison Reyes allison https://lacasadeltinte.com/author/allison/
9 Edwin Silva edwin https://lacasadeltinte.com/author/edwin/
3 Genaro Aguilar gaguilar https://lacasadeltinte.com/author/gaguilar/
2 Jorge Sequeira seo https://lacasadeltinte.com/author/seo/
Recommendation: Require authentication for WordPress REST API or disable user enumeration. Consider using security plugins or server-level restrictions.
Failed Security Tests:
  • XMLRPC
  • WP-Login
  • User Enumeration
Request Assistance
Security Headers Analysis
Need help understanding security headers? View our comprehensive documentation to learn about each header and how to implement them.
Present Security Headers

No security headers detected

Missing Security Headers
Strict-Transport-Security
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Referrer-Policy
Content-Security-Policy
Permissions-Policy
Cross-Origin-Embedder-Policy
Cross-Origin-Opener-Policy
Cross-Origin-Resource-Policy
Request Assistance
External JavaScripts Detected
Only scripts from different domains are shown
Domain Script URL Type
connect.facebook.net https://connect.facebook.net/en_US/fbevents.js Inline Reference
www.googletagmanager.com https://www.googletagmanager.com/gtag/js?id=G-6GGS73V0KT External
www.googletagmanager.com https://www.googletagmanager.com/gtag/js?id=AW-11397027497 External
HTTP Headers
Learn about HTTP Headers
HTTP Response Code
200 OK - Request successful
HTTP Protocol Version
Excellent! Your website is using HTTP/2

Your website is using a modern HTTP protocol version, which provides better performance and security features.

Information Disclosure: Server Version

Header: x-powered-by
Value: PHP/8.1.33

Server Type: PHP

The X-Powered-By header reveals server version information, which can be used by attackers to identify vulnerabilities.
Information Disclosure: Server Version

Header: server
Value: LiteSpeed

Server Type: LiteSpeed

The Server header reveals server version information, which can be used by attackers to identify vulnerabilities.
Gzip Compression Enabled 👍

Great! This site is using Gzip compression to improve performance and reduce bandwidth usage.

Header Value
date Wed, 29 Oct 2025 18:30:31 GMT
etag "12854-1761685470;gz"
link <https://lacasadeltinte.com/wp-json/>; rel="https://api.w.org/"
vary Accept-Encoding,User-Agent
server LiteSpeed
alt-svc h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
content-type text/html; charset=UTF-8
http_version HTTP/2
x-powered-by PHP/8.1.33
content-encoding gzip
x-litespeed-cache hit
Service Disclaimer

Free Service: This website security analyzer is provided as a free service to help website owners and administrators identify potential security issues and improve their website's security posture.

Donations: We welcome and appreciate donations to help us maintain and improve this service. Your support helps us keep this tool free and continuously enhance its capabilities.

Affiliate Links: We may use affiliate links for various security services, hosting providers, and security tools mentioned throughout this analysis. If you choose to purchase any of these services through our links, we may receive a small commission at no additional cost to you. This helps support the development and maintenance of this free service.

Support Our Service

Help us keep this tool free and improve it further

Buy us a Coffee Make a Donation via PayPal
Please wait, running the scan...
This may take a few moments