Domain Information
WordPress Version: 6.9.1 VULNERABLE
Theme: astra 4.12.3· 100% conf. (theme used by 390,712 domains)
Last Checked: 2026-09-12 07:01:28
HTTPS: Yes
Server: Apache
Response time (TTFB): 3,260 ms slow
Hosting: IONOS SE (AS8560)
IP address: 217.160.0.xxx
PHP version: 8.4.24
Plugins (15)
| Plugin | Version | Used By |
|---|---|---|
| astra-sites | — | 105,017 |
| complianz-gdpr | — | 246,451 |
| contact-form-7 | 6.1.7· 85% conf. | 1,685,958 |
| creame-whatsapp-me | 6.3.2· 85% conf. | 65,475 |
| elementor | 3.35.5· 85% conf. | 1,678,767 |
| elementor-pro | — | 998,699 |
| elementskit-lite | 4.0.5· 85% conf. | 168,237 |
| essential-addons-for-elementor-lite | 6.8.3· 85% conf. | 248,826 |
| gtranslate | 3.1.2· 60% conf. | 117,562 |
| header-footer-elementor | 2.9.4· 85% conf. | 194,204 |
| pro-elements | 3.35.0· 85% conf. | 59,920 |
| royal-elementor-addons | 1.7.1067· 85% conf. | 52,076 |
| woocommerce | 11.0.1· 85% conf. | 776,792 |
| woocommerce-payments | — | 100,053 |
| wp-statistics | 14.16.3· 60% conf. | 54,670 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.1) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (217.160.0.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- 3*0*g*a*-*e*e*b*r*l*n*.de
- a*t*s*f*r*h*u*-*f*r*h*i*.de
- a*a*e*d*z.es
- a*a*d*y*g*v*t*r*a.com
- a*d*e*s*e*t*.com
- a*d*e*g*l*i*s.eu
- a*i*a*i*-*a*n*-*e*a*d*e*-*a*l*s.com
- a*o*m*s*c.com
- a*t*n*o*c*z*r.com
- a*t*n*m*i*s.com
- a*c*e*i*t*o*.com
- a*c*3*.com
- a*k*d*a*.eu
- b*s*n*a*l.org
- b*h*i*l*g.de
- b*p*s*u*.com
- b*r*e*u*g*e*f*s*.com
- b*u*g*g*e*a*e*o*.fr
- b*e*d*r*o*f*h*r*e*.de
- b*n*p*o.com
- c*a*.fr
- c*a*u*c*i.com
- c*a*e*u*d*-*a*z.com
- c*a*e*u*a*t*a*e*e*t.com
- c*s*p*a*m*.de