Domain Information
WordPress Version: 6.9.1 VULNERABLE
Theme: twentyfourteen (used by 9,850 domains)
Last Checked: 2026-09-08 03:13:14
HTTPS: Yes
Server: Apache
Response time (TTFB): 1,411 ms slow
Hosting: IONOS SE (AS8560)
IP address: 74.208.236.xxx
PHP version: 8.2.33
Plugins (5)
| Plugin | Used By |
|---|---|
| advanced-backgrounds | 7,540 |
| amazon-product-in-a-post-plugin | 232 |
| instagram-feed-pro | 31,897 |
| jetpack | 416,614 |
| wp-imageviewer | 143 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.1) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (16)
These WordPress domains are served from the same IP (74.208.236.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- b*o*b*a*d*h*t.com
- b*o*s*y*l*x*n*e*.com
- b*a*n*a*d*a*e*r*.com
- b*a*d*n*h*m*l.com
- d*n*e*-*u*r*e*.com
- d*v*r*s*a*a*o*.com
- e*o*u*i*n*r*t*a*s.com
- g*t*u*r*a*h*o*k*.org
- h*n*i*t*e*l*a*.com
- i*v*t*t*o*s*c*l*i*r*p*y.com
- m*x*e*l*u*e.com
- m*c*y*a*u*t*o*.com
- p*t*.blue
- r*y*a*d*c*u*.com
- s*c*a*g*l*.com
- s*l*r*n*h*e*i*.com