Domain Information
WordPress Version: 6.9 VULNERABLE
Theme: freshcart 1.2.3· 100% conf. (theme used by 9 domains)
Last Checked: 2026-09-09 05:38:53
HTTPS: Yes
Server: Apache
Response time (TTFB): 467 ms
Hosting: IONOS SE (AS8560)
IP address: 74.208.236.xxx
Plugins (18)
| Plugin | Version | Used By |
|---|---|---|
| checkout-field-editor-and-manager-for-woocommerce | 3.0.1· 60% conf. | 2,100 |
| creame-whatsapp-me | 6.0.9· 60% conf. | 66,297 |
| jetpack | — | 411,832 |
| mailchimp-for-woocommerce | 5.5.1.07· 60% conf. | 43,067 |
| pymntpl-paypal-woocommerce | — | 1,499 |
| side-cart-woocommerce | 2.7.2· 85% conf. | 8,845 |
| smooth-back-to-top-button | 1.2· 85% conf. | 6,900 |
| subscriptions-for-woocommerce | 1.8.10· 85% conf. | 400 |
| weglot | 5.2· 85% conf. | 15,374 |
| woo-product-bundle | 8.4.2· 85% conf. | 4,324 |
| woocommerce | 3.1.6· 85% conf. | 789,108 |
| woocommerce-gateway-authorize-net-cim | 5.15.12· 85% conf. | 7,875 |
| woocommerce-gift-cards | 2.7.2· 85% conf. | 2,791 |
| woocommerce-google-analytics-integration | — | 27,449 |
| woocommerce-product-bundles | 8.5.5· 85% conf. | 8,323 |
| wp-user-avatar | 4.16.8· 85% conf. | 24,737 |
| wpforms-lite | 1.9.8.7· 85% conf. | 116,435 |
| yith-woocommerce-wishlist | — | 39,452 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (74.208.236.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*g*1*5*.org
- b*o*g*o*t*s*e.com
- b*y*o*t*r*v*n*n*e*o*e*s.com
- b*e*t*e*e*u*y*a.com
- c*b*m*g.org
- d*c*a*.com
- d*w*t*w*a*t*n.ca
- e*a*o*u*.com
- e*o*v*f*t*e*s*c*d*m*.com
- e*o*v*f*t*e*s*p*l*t*n.com
- e*t*e*e*a*d*r*i*e*.com
- f*b*i*a*t*s*e*o*u*i*n*s.com
- f*i*f*e*d*a*d*a*e.com
- f*e*c*c*n*l*o*t*o*p*n*.com
- h*r*u*a*m*s*c*a*s.com
- k*m*n*e*.com
- k*n*d.com
- m*x*o*o*.com
- m*x*g*n*.com
- m*x*w*b.com
- m*f*b*r*r*s.com
- n*m*c*i*e*e*v*c*.com
- o*k*v*n*e*a*d*c*p*n*.com
- o*-*r*e*o*x.com
- r*c*e*r*c*e*e*t*.com