Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: hello-elementor 3.0.1· 100% conf. (theme used by 597,939 domains)
Last Checked: 2026-09-09 18:03:39
HTTPS: Yes
Server: Apache
Response time (TTFB): 3,497 ms slow
Hosting: IONOS SE (AS8560)
IP address: 74.208.236.xxx
Plugins (22)
| Plugin | Version | Used By |
|---|---|---|
| ameliabooking | 7.4.3· 60% conf. | 6,819 |
| armember | — | 496 |
| ele-custom-skin | 3.1.7· 85% conf. | 25,306 |
| ele-custom-skin-pro | 3.2.4· 60% conf. | 5,276 |
| elementor | 3.19.0· 85% conf. | 1,695,155 |
| elementorpro3171n | 3.17.1· 85% conf. | 210 |
| elementskit-lite | 3.0.4· 85% conf. | 169,951 |
| essential-addons-for-elementor-lite | 5.9.7· 85% conf. | 251,601 |
| gravityforms | 2.7.2.1· 85% conf. | 246,917 |
| header-footer-elementor | 1.6.37· 85% conf. | 195,990 |
| integrate-google-drive-premium | 1.3.94· 60% conf. | 356 |
| miniorange-otp-verification | 5.2.8· 85% conf. | 555 |
| smart-phone-field-for-gravity-forms | 2.1· 85% conf. | 657 |
| translatepress-multilingual | 2.7.0· 85% conf. | 65,205 |
| tutor | 2.6.0· 85% conf. | 7,284 |
| tutor-lms-elementor-addons | 2.1.4· 85% conf. | 1,829 |
| tutor-pro | 2.6.0· 85% conf. | 3,343 |
| ultimate-member | 2.9.2· 85% conf. | 26,754 |
| woocommerce | 8.5.5· 85% conf. | 783,975 |
| woocommerce-deposits | 4.1.17· 85% conf. | 1,798 |
| woocommerce-multi-currency | 2.3.2· 85% conf. | 2,443 |
| wp-fastest-cache-premium | — | 4,479 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (74.208.236.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*g*y*r*w*g*y.com
- a*n*y*o.com
- a*n*h*n*.com
- a*t*o*y*h*r*n.com
- a*a*t*m*n*o*c*r*a*e*i.com
- b*c*l*.net
- d*n*l*a*u*l*r.com
- d*n*a*o*t*o.com
- d*v*d*o*e*b*.com
- d*x*a*u*a*t*r*n*.com
- d*s*n*.org
- h*s*u*i*i*s*i*u*e.com
- k*l*y*t*a*e*s.com
- k*r*t*n*a*i*t*n.com
- k*d*p*a*s*i*e.com
- n*y*n*y*.com
- o*k*r*s*m*r*e*.com
- o*k*r*s*m*r*e*s.com
- o*k*r*s*r*w*r*s.com
- o*y*p*c*i*t*p*b*i*h*n*.com
- o*e*i*e*u*r*a*h*i*i*t*i*s.com
- r*e*e*u*a*i*n.com
- r*d*e*o*d*w*i*g.com
- t*e*d*a.c*m.mx
- t*u*v*c*.com