Domain Information
WordPress Version: 6.9 VULNERABLE
Theme: lightning (theme used by 30,857 domains)
Last Checked: 2026-09-07 11:47:06
HTTPS: Yes
Server: nginx
Response time (TTFB): 3,358 ms slow
Hosting: GMO Internet, Inc. (AS7506)
IP address: 160.251.71.xxx
Plugins (3)
| Plugin | Version | Used By |
|---|---|---|
| vk-all-in-one-expansion-unit | — | 35,716 |
| vk-blocks | — | 22,926 |
| wordpress-popular-posts | — | 34,650 |
Security Headers
All headers present
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (160.251.71.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*n*-*i*o*g*.com
- a*n*-*i*a.com
- a*p*s*n*o*l*g.com
- b*o*l*f*-*i*r*.com
- d*s*g*-*g*o*i*o*i.com
- e*e*n*t*0*2*.com
- e*z*n*j*p*n.com
- h*d*k*c*i*u*.com
- h*k*k*r*v*e*.com
- k*i*n*h*a*a*e*a*i.com
- k*k*r*-*e*a*a*.com
- k*l*n*a*i*g*a*e.com
- k*m*m*t*u*a*a.com
- k*p*a*p*n.com
- k*t*m*h*.com
- k*t*i*a*u*i.com
- k*d*-*h*r*p*s*-*l*g.com
- k*m*m*n*5*.com
- k*n*m*g*z*n*s.com
- k*n*l*-*o*m*t*c*.com
- k*r*i*n*-*o*i.com
- k*t*n*-*a*a*i*o*r*o*.com
- m*y*s*l.tokyo
- m*y*m*l*b*a*y.com
- o*e*a*a*a*i*e.com