Site Information
WordPress Version: 6.9.4 VULNERABLE
Theme: kadence (used by 77,532 domains)
Last Checked: 2026-09-06 02:38:21
HTTPS: Yes
Server: LiteSpeed
CDN / WAF: Cloudflare
Response time (TTFB): 3,622 ms slow
Hosting: OVH SAS (AS16276)
IP address: 135.125.104.145
Other WordPress sites on this IP (25+)
These WordPress sites are served from the same IP (135.125.104.145) — usually shared hosting or the same owner. Domains are obfuscated, as everywhere on the site.
- 2*e*u*e.co
- a*d*l*l*n*a*t*f*l*.com
- b*j*b*u*d.org
- b*o*-*a*e*.com
- c*l*.o*g.uk
- d*l*e*o*.com
- d*l*a*t*a*d*c*s.com
- d*r*a*o*u*w*s*.com
- e*a*d*t*c*.com
- e*i*e*e*l*h*l*n.com
- e*-*c*b*o*e*h.com
- f*s*i*g*r*p*k*l*v*s.gr
- h*l*c*t*o*.com
- h*l*e*i*m*t*t*u*s.com
- h*d*a*r*.com
- j*e*e*e*r.com
- k*r*n*a*c*a*.xyz
- m*v*r*c*s*b*r*a*.com
- m*x*e*i*u*a.com
- m*y*n*s*e*.com
- r*p*i*d*i*y.com
- r*s*b*.com
- r*t*n*d.com
- s*b*a*a*e*c*n*e*.com
- s*a*b*e*.com
Plugins (1)
| Plugin | Used By |
|---|---|
| wp-accessibility-helper | 2,773 |
Security Headers
1 missing header
Missing headers:
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.