Domain Information
WordPress Version: 7.1
Theme: panoramic 1.1.47· 100% conf. (theme used by 1,245 domains)
Last Checked: 2026-09-10 18:25:40
HTTPS: Yes
Server: Apache
Response time (TTFB): 3,724 ms slow
Hosting: Unified Layer (AS46606)
IP address: 70.40.220.xxx
Plugins (10)
| Plugin | Version | Used By |
|---|---|---|
| audioigniter | 2.0.4· 85% conf. | 3,449 |
| elementor | 4.1.2· 85% conf. | 1,689,719 |
| filebird-pro | 6.5.4· 60% conf. | 3,938 |
| formidable | — | 71,016 |
| wonderplugin-3dcarousel | 4.6.1PRO· 85% conf. | 324 |
| wonderplugin-audio | 12.1.1PRO· 85% conf. | 494 |
| wonderplugin-gridgallery | 19.5.1PRO· 85% conf. | 1,449 |
| wonderplugin-slider | 14.3.1PRO· 85% conf. | 1,020 |
| wonderplugin-videoembed | 2.4.1PRO· 60% conf. | 70 |
| wp-content-copy-protector | — | 25,707 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
No exposed files detected
Our automated scan did not detect any publicly-accessible sensitive files or critical misconfigurations on this domain.
However, this does not mean the site is completely secure. There are many other potential vulnerabilities that require deeper analysis:
- Outdated themes or plugins
- Outdated third-party scripts and software
- Weak passwords and authentication
- SQL injection vulnerabilities
- Cross-site scripting (XSS) issues
- Insecure server configurations
- OS command injection vulnerabilities
- Unprotected file uploads
- ...
Questions about your WordPress security? Reach out — we offer comprehensive security audits and can help identify hidden vulnerabilities.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (70.40.220.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*d*s*r*f*i*.com
- a*t*o*y*f*o*d.com
- b*o*a*o*t*o*k*.com
- b*a*l*y*o*d*n*s*l*.com
- d*a*a*h*y.com
- d*f*y*u*d*s*i*y*o*k.com
- e*e*a*e*t*d*n*n*t*i*i*n.com
- e*a*h*b*t*.com
- e*e*y*h*n*j*u*n*l*n*.com
- e*n*t*r*l*e*l*h.com
- e*e*o*l*n*.com
- f*r*n*d*n*l*t*u*e*.com
- f*x*h*p*n*.com
- g*a*w*t*c*m*l*a.com
- h*r*t*h*r*.com
- h*l*s*r*e*c*i*i*.com
- i*y*l*i*d*i*l*c*u*c*.org
- k*r*n*r*n*t.com
- k*n*u*k*l*m*n*a*.com
- k*m*a*t*m*t*v*s*r*i*e*.com
- k*b*j*p*n*e*t*u*a*t.com
- m*i*g*o*p*.com
- m*g*h*a*.com
- m*g*e*t*e.com
- n*c*p*e*r*.com