Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: astra 4.12.7· 100% conf. (theme used by 394,051 domains)
Last Checked: 2026-09-10 00:36:24
HTTPS: Yes
Server: openresty
Response time (TTFB): 1,447 ms slow
Hosting: Loopia AB (AS41528)
IP address: 109.235.174.xxx
Plugins (4)
| Plugin | Version | Used By |
|---|---|---|
| beautiful-and-responsive-cookie-consent | 4.9.2· 85% conf. | 6,094 |
| eduadmin-booking | — | 10 |
| elementor | 4.0.2· 85% conf. | 1,689,719 |
| latest-post-shortcode | — | 1,023 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (109.235.174.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*d*r*e*b*r*.nu
- a*d*r*s*n*i*c*a*t.com
- a*d*a*e*c*u.com
- a*d*e*s*e*d*n.com
- a*n*d*a*g*l.com
- a*n*r*i*m*n.com
- b*g*r*n*c*b*n*e*.se
- b*n*y*a*l*n.se
- b*o*o*p*s*.se
- b*a*e*a*n*t.com
- b*a*n*n*.se
- b*o*h*o*p.com
- b*o*e*d*s*g*.com
- b*o*c*o*f*c*a*.com
- c*r*e.se
- c*k*a*e*l*s*c*k*l.se
- d*n*e*e*g.com
- d*n*e*k*r*s*o*m*s*c.com
- d*t*c*a*s*.com
- d*t*r*i*s*n.com
- d*v*d*i*s*.com
- d*a*a*e*.com
- d*c*s*o*d*n*m*c*.com
- d*s*g*o*o*m.com
- d*s*g*p*i*i*.com