Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: free_sample001 1.0· 100% conf. (theme used by 9 domains)
Last Checked: 2026-09-09 02:54:45
HTTPS: Yes
Server: nginx
Response time (TTFB): 2,836 ms slow
Hosting: GMO Internet, Inc. (AS58791)
IP address: 160.251.148.xxx
Plugins (1)
| Plugin | Version | Used By |
|---|---|---|
| contact-form-7 | 6.1.5· 85% conf. | 1,698,348 |
Security Headers
All headers present
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (22)
These WordPress domains are served from the same IP (160.251.148.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*k*-*h*n*y*-*e*k*t*u*n.com
- a*s*g*-*o*s*e*y.com
- e*p*r*-*a*u*i.com
- f*o*l*.com
- h*l*s*a*.com
- k*f*s*r*.net
- k*b*t*u*e*r*h*i*g.com
- k*k*m*n*.com
- l*t*i*.jp
- m*d*c.jp
- o*a*a*t*e*i*d*s*r*.com
- o*o*3*s*i*5*h*n.com
- r*k*z*n*a*a*a*g*s*r*n*m*.com
- s*b*k*u.com
- t*t*d*u*a*.c*.jp
- t*u*h*d*-*o*u*o*.com
- t*u*u*.com
- w*t*k.net
- y*n*v*.com
- y*s*p*r*-*a*o*i.com
- y*s*p*r*l*f*y*u*8*8.com
- y*u*-*n*.com