Site Information
WordPress Version: 6.9.4 VULNERABLE
Theme: hello-elementor (used by 607,710 domains)
Last Checked: 2026-09-06 04:54:27
HTTPS: Yes
Server: Apache
Response time (TTFB): 4,032 ms slow
Hosting: IONOS SE (AS8560)
IP address: 217.160.0.119
Other WordPress sites on this IP (20)
These WordPress sites are served from the same IP (217.160.0.119) — usually shared hosting or the same owner. Domains are obfuscated, as everywhere on the site.
- a*d*m*o*e*b*r*e*o*a.com
- a*d*a*e*g*m*s.com
- a*d*e*c*r*s*e*.com
- d*m*e*i*l*s*o*n*s*e.com
- d*s*h*z*e*n*a*c*i*e*t*n.de
- d*p*r*e*e*d*p*p*e*.com
- e*a*i*a*o*k*.com
- h*l*e*a*s*c*a*i*n.com
- h*l*g*n.com
- j*k*k*m.de
- m*h*a*.eu
- n*l*a*o*e*.com
- r*f*r*a*b*r*t*s*s*u*i*s.com
- r*g*r*c*c.com
- r*p*o*r*i*.com
- s*-*y*n*s*.com
- s*c*a*f*x*d*.com
- t*e*l*c*r*b*i*.c*.uk
- t*e*n*o*d*a*e.de
- v*c*o*i*f*c*a*g*.com
Plugins (10)
| Plugin | Used By |
|---|---|
| elementor | 1,724,510 |
| essential-addons-for-elementor-lite | 256,520 |
| gtranslate | 120,547 |
| happy-elementor-addons | 48,071 |
| header-footer-elementor | 199,691 |
| jetpack | 425,938 |
| royal-elementor-addons | 53,594 |
| woocommerce | 796,664 |
| woocommerce-payments | 104,635 |
| woolentor-addons | 7,930 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.