Domain Information
WordPress Version: 6.8 VULNERABLE
Theme: kleo 5.1.2· 100% conf. (theme used by 1,174 domains)
Last Checked: 2026-09-10 21:43:56
HTTPS: Yes
Server: Apache
Response time (TTFB): 2,009 ms slow
Hosting: IONOS SE (AS8560)
IP address: 217.160.0.xxx
PHP version: 8.3.33
Plugins (15)
| Plugin | Version | Used By |
|---|---|---|
| anspress-question-answer | 4.4.4· 60% conf. | 502 |
| complianz-gdpr | — | 247,894 |
| frontend-post-submission-manager | — | 123 |
| js_composer | — | 400,654 |
| mycred | — | 1,330 |
| revslider | — | 580,456 |
| theme-my-login | — | 10,294 |
| wpfront-notification-bar | — | 5,631 |
| youzify | — | 620 |
| youzify-activity-reactions | — | 48 |
| youzify-block-members | — | 32 |
| youzify-edit-activity | — | 35 |
| youzify-members-search | — | 33 |
| youzify-moderation | — | 34 |
| youzify-social-share | — | 31 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.8) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (217.160.0.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*f.aero
- a*e*i*e*a*s.fr
- a*a*a*t*r*s*c*l*g*.com
- a*c*i*t*e*u*a.com
- a*d*r*a*e*c*l*r.com
- a*d*e*-*t*a*s*r.com
- a*d*e*a*n*m*r*t*.com
- a*j*s*h*a*m.com
- a*k*s*h*l*.com
- a*t*v*r*e*p*.com
- a*t*o*y*l*w*s.com
- a*t*n*o*s*a*a.com
- a*a*s*i*z*e*n*i*o.com
- a*a*t*m*n*o*u*r*o*l*y*.com
- a*e*i*r*r*i*t*.online
- b*y*e*f*a*e.c*.uk
- b*y*i*w*o*g*m*z.com
- b*n*e.de
- b*s*n*s*q*a*t*r.c*.uk
- c*n*e*a.coffee
- c*n*c*o*s*u*i*n.wien
- c*n*r*y*g*h*e*c*.es
- c*i*d*n*l*c*m*s*t*.c*.uk
- c*m*l*j*l*s*r*e*i*.com
- d*n*c*o*.com