Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: x-t9 1.42.3· 100% conf. (theme used by 836 domains)
Last Checked: 2026-09-11 06:15:47
HTTPS: Yes
Server: Apache
Response time (TTFB): 1,888 ms slow
Hosting: GMO Internet, Inc. (AS7506)
IP address: 163.44.185.xxx
PHP version: 8.3.33
Plugins (7)
| Plugin | Version | Used By |
|---|---|---|
| add-search-to-menu | 5.5.18· 85% conf. | 23,000 |
| instagram-feed | 6.13.0· 85% conf. | 214,438 |
| post-grid | — | 2,268 |
| snow-monkey-forms | — | 4,712 |
| vk-all-in-one-expansion-unit | 9.123.1· 85% conf. | 35,797 |
| vk-blocks | 1.127.0· 85% conf. | 22,978 |
| xo-liteslider | 3.8.6· 85% conf. | 1,497 |
Security Headers
All headers present
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (163.44.185.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*-*.jp
- a*i*a*t*a*1*o*o*t*k*.com
- a*m*s*k*n*.com
- a*w*l*.com
- a*a*e*o*.com
- b*t*n*c*l*e.com
- b*w*o*s*0*2*.com
- b*-*l*m*.com
- b*c*r*e*.com
- c*a*a*k*-*i*a.com
- c*i*k*d*e.jp
- d*z*l*-*o*k*.com
- d*w*o*i*n*a*.com
- e*a*-*a*o*.com
- e*o*s*i*e.com
- e*e*f*e*-*.com
- f*n*a*t*c*i*a*m*c*i*e.com
- f*s*-*o*c*e*.com
- h*n*o*.jp
- h*b*k*r*k*t*u*e*i.com
- h*r*y*m*h*m*.com
- h*r*s*i*w*r*s.com
- h*s*s*i*t*u.com
- h*s*i*s*o*t*n*a*.com
- h*t*k*c*i*h*t*y*s*m*.com