Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: astra-child (used by 6,980 domains)
Last Checked: 2026-09-07 08:30:02
HTTPS: Yes
Server: cloudflare
CDN / WAF: Cloudflare
Response time (TTFB): 274 ms fast
Hosting: Cloudflare, Inc. (AS13335)
IP address: 162.159.136.xxx
Plugins (14)
| Plugin | Used By |
|---|---|
| ajax-search-for-woocommerce-premium | 6,215 |
| astra-addon | 90,834 |
| cartpops-pro | 72 |
| creame-whatsapp-me | 66,561 |
| elementor | 1,715,741 |
| elementor-pro | 1,022,863 |
| jet-tabs | 32,377 |
| jetpack | 418,418 |
| omnisend-connect | 2,254 |
| pixel-manager-pro-for-woocommerce | 1,179 |
| woo-product-bundle-premium | 2,752 |
| woocommerce | 792,684 |
| wp-rocket | 322,590 |
| wpc-linked-variation | 466 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (162.159.136.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*s*h*t*c*w*r*h*u*e.c*.uk
- a*d*o*e*i.com
- a*e*o*i*i*a*.com
- a*g*l*c*u*b*r.com
- b*n*i*c*r*a*n*.com
- b*r*n*o*.com
- b*u*i*u*l*u.com
- b*w*u*t*n*i*l*n*i*o*t*i*t*r*.com
- b*w*e*c*n*t*u*t*o*g*o*p.com
- c*l*b*e*r*g*t.com
- d*n*i*g*e*r*o*g*.com
- d*n*e*m*e*i*m.com
- d*n*a*c*s*e*i*s.com
- d*n*e*u*.com
- d*s*g*e*-*t*i*c*s*s.com
- d*s*g*p*o*p*t*e*n*.com
- d*s*g*s*o*c*.com
- d*s*m*c*i*e*.com
- d*k*y*.c*.il
- e*r*p*a*-*a*r*.eu
- e*o*v*e*r*y*e*r*i*g.com
- e*a*v*r*r*.com
- e*a*r.com
- h*l*o*a*p*n*.com
- h*l*d*s*g*e*.com