Site Information
WordPress Version: 6.9.4 VULNERABLE
Theme: Avada (used by 118,204 domains)
Last Checked: 2026-09-05 23:16:36
HTTPS: Yes
Server: Apache
Response time (TTFB): 3,175 ms slow
Hosting: IONOS SE (AS8560)
IP address: 217.160.0.174
Other WordPress sites on this IP (19)
These WordPress sites are served from the same IP (217.160.0.174) — usually shared hosting or the same owner. Domains are obfuscated, as everywhere on the site.
- a*r*p*n.it
- a*t*c*s*i*s*e*t*u*-*s*u*a*c*.fr
- c*m*d*e*l*b*i*e.fr
- e*o*e*p*.com
- e*v*e*o.com
- g*l*e*r*t*o*r*j*c*.art
- h*m*-*a*k.com
- k*m*.fr
- k*e*t*v*e*k*e*i*.de
- l*s*l*f*d*t*r*t.com
- l*o*i*g*f*r*a*d.to
- m*x*h*i*m*n*s*t.com
- m*x*t*b*.com
- n*t*r*o*o*r*f.eu
- p*a*e*l*p*i*o*o*i*.es
- p*i*e*p*l*e*.com
- r*f*r*a*m*r*i.com
- t*e*o*z*n*r*l*-*a*l*r*a.com
- t*e*o*z*n*r*l*m*l*o*c*.com
Plugins (2)
| Plugin | Used By |
|---|---|
| ultimate-member | 27,201 |
| um-recaptcha | 259 |
Security Headers
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.