Domain Information
WordPress Version: 6.9 VULNERABLE
Theme: phlox-pro 5.7.3· 100% conf. (theme used by 4,542 domains)
Last Checked: 2026-09-09 19:03:38
HTTPS: Yes
Server: Apache
Response time (TTFB): 212 ms fast
Hosting: SuperHosting.BG Ltd. (AS201200)
IP address: 164.138.219.xxx
Plugins (7)
| Plugin | Version | Used By |
|---|---|---|
| auxin-elements | 2.17.9· 85% conf. | 7,688 |
| auxin-portfolio | 2.3.10· 60% conf. | 3,301 |
| auxin-pro-tools | 1.7.4· 85% conf. | 3,980 |
| auxin-the-news | 1.5.6· 60% conf. | 372 |
| contact-form-7 | 6.0.6· 85% conf. | 1,694,402 |
| cookie-law-info | 3.2.10· 85% conf. | 219,490 |
| elementor | 3.20.1· 85% conf. | 1,689,719 |
Security Headers
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (164.138.219.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*b*c*n*u*t.com
- a*a*o*i*b*i*d*n*.com
- a*k*s*.com
- b*u*i*u*b*a*o*v*r*d.com
- b*x*o*e*e*b*r.com
- b*e*i*h*a*p*n.com
- d*t*-*n*o*m*t*c*.com
- d*t*k*t*g*a*i*i.com
- d*y*s*o*o*a.com
- d*g*o*y.com
- d*g*t*l*m*d*e*s.com
- e*b*g*o*p.bg
- e*i*g.com
- e*m*n*y*.com
- e*r*v*t.com
- e*t*n*-*e*e*i.com
- h*g*l*v*l*c*d*m*.com
- i*k*s*v*-*-*r*t*k*-*h*.bg
- k*m*n*k*l*v*.com
- k*n*o*a*t*s*e*a.com
- k*r*s*k*.com
- k*r*i*u*g*s.com
- k*r*i*l*v*i*.com
- k*r*a*y*r*v*l.com
- k*s*h*o*w*r*.com