Domain Information
WordPress Version: 6.9 VULNERABLE
Theme: uicore-pro 2.0.1· 100% conf. (theme used by 653 domains)
Last Checked: 2026-09-09 06:48:49
HTTPS: Yes
Server: Apache
Response time (TTFB): 3,706 ms slow
Hosting: OVH SAS (AS16276)
IP address: 87.98.231.xxx
PHP version: 8.2
Plugins (11)
| Plugin | Version | Used By |
|---|---|---|
| admin-email-address-changer | 1.0.3· 85% conf. | 91 |
| bdthemes-element-pack | 7.18.9· 85% conf. | 24,686 |
| complianz-gdpr | — | 250,139 |
| contact-form-7 | 6.1.4· 85% conf. | 1,707,342 |
| elementor | 3.33.2· 85% conf. | 1,707,286 |
| google-site-kit | — | 258,056 |
| official-mailerlite-sign-up-forms-2 | 1.7.20· 60% conf. | 0 |
| uicore-animate | — | 4,737 |
| uicore-elements | 1.3.10· 85% conf. | 3,134 |
| uicore-framework | 1.0.0· 60% conf. | 4,620 |
| woocommerce | 10.3.6· 85% conf. | 789,108 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (87.98.231.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*a*o*d*j*s*u*i*.es
- a*a*p*i*o*o*i*.com
- a*a*d*a*a*.com
- a*a*d*s*a*n.com
- a*b*r*a*.com
- a*d*l*c*a*f*c*o*.com
- a*g*l*a*a*.com
- a*a*t*m*n*o*m*r*b*a*c.com
- b*u*d*t*o*p*t*l*a*.es
- b*w*t*s*.com
- d*n*o*a*r*s*.com
- d*n*e*b*t*n.com
- d*n*p*a*a*l*b*d.com
- d*t*c*n*u*s*l.com
- d*v*d*s*n*i*.com
- d*v*d*u*i*o.com
- d*a*l.com
- d*n*a*e*p*r*u*t*r*e*o*.com
- d*a*c*n*j*.com
- e*p*i*a*a*s*.com
- e*p*i*a*a*z*.com
- h*r*e*i*s*i*u*.com
- k*l*n*a*a*a.com
- n*v*a*i*g*n*e*i*.es
- o*m*s*i*a.com