Domain Information
WordPress Version: Unknown
Theme: astra (theme used by 396,526 domains)
Last Checked: 2026-09-07 04:06:35
HTTPS: Yes
Server: nginx
Response time (TTFB): 1,223 ms slow
Hosting: Oracle Corporation (AS31898)
IP address: 162.241.252.xxx
Plugins (15)
| Plugin | Version | Used By |
|---|---|---|
| astra-addon | — | 90,405 |
| elementor | — | 1,707,286 |
| elementor-pro | — | 1,017,560 |
| embedpress | — | 18,232 |
| hide-admin-bar-based-on-user-roles | — | 3,859 |
| jetpack | — | 411,832 |
| magic-action-box-pro | — | 76 |
| popupally-pro-disable | — | 0 |
| premium-addons-for-elementor | — | 79,201 |
| recent-posts-widget-with-thumbnails | — | 24,689 |
| total-recipe-generator-el | — | 68 |
| woo-donations | — | 676 |
| woocommerce | — | 789,108 |
| wp-sendfox | — | 47 |
| wp-smushit | — | 87,233 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
No exposed files detected
Our automated scan did not detect any publicly-accessible sensitive files or critical misconfigurations on this domain.
However, this does not mean the site is completely secure. There are many other potential vulnerabilities that require deeper analysis:
- Outdated themes or plugins
- Outdated third-party scripts and software
- Weak passwords and authentication
- SQL injection vulnerabilities
- Cross-site scripting (XSS) issues
- Insecure server configurations
- OS command injection vulnerabilities
- Unprotected file uploads
- ...
Questions about your WordPress security? Reach out — we offer comprehensive security audits and can help identify hidden vulnerabilities.
Other WordPress domains on this IP (23)
These WordPress domains are served from the same IP (162.241.252.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- b*e*n*n*o*e*s.com
- d*n*a*g*o*p*f*s*e*.com
- d*n*a*g*o*p*f*o*s*n.com
- d*p*r*n*.com
- d*m*s*c*o*k*.com
- e*i*a*r*k.com
- f*o*f*r*h*s*u*.me
- h*r*z*a*g*o*a*.com
- h*c*o*y*u*t*r.com
- h*g*n*.com
- h*g*i*b*t*a*e*g*n*e*i*g.com
- j*s*p*u*b*o*.org
- k*r*b*l*r*v*.com
- k*i*h*a*o*s*n.com
- k*w*n*h*l*.com
- m*x*e*l*s*r*c*s*.com
- m*l*a*b*s.com
- m*a*o*l*r*p*d*a*r*c*.com
- o*b*a*d*n*d*r*c*.com
- v*s*t*e*i*a*i*n*a*c*.com
- w*t*e*a*a*o*s.com
- w*i*h*l*s*f*r*u*s.com
- w*l*r*m*o*a*.com