Domain Information
WordPress Version: 6.9.1 VULNERABLE
Theme: oceanwp 4.1.5· 100% conf. (theme used by 76,442 domains)
Last Checked: 2026-09-09 17:29:47
HTTPS: Yes
Server: o2switch-PowerBoost-v3
Response time (TTFB): 988 ms
Hosting: O2switch SAS (AS50474)
IP address: 185.246.44.xxx
Plugins (6)
| Plugin | Version | Used By |
|---|---|---|
| google-analytics-for-wordpress | — | 194,301 |
| litespeed-cache | — | 142,923 |
| liteweight-podcast | — | 131 |
| mp3-music-player-by-sonaar | — | 3,192 |
| real-cookie-banner | — | 3,080 |
| userfeedback-lite | — | 1,637 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.1) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (24)
These WordPress domains are served from the same IP (185.246.44.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*c*e*a*r*r*n*e*.fr
- a*n*a*r*-*i*c*n*.com
- b*d*o*k*y.fr
- c*l*i*r*e*e*t*i*u*-*h*e*.fr
- d*c*p*u*o*s.com
- d*c*-*u*g*e.com
- d*s*t*s*s*e*s.com
- f*i*s*r*e*s.com
- f*r*a*t*i*t*r*e*-*o*i*e.com
- g*g*.fr
- i*-*r*v*u*.fr
- l*j*u*n*l.biz
- l*p*v*l*o*d*l*c.fr
- m*r*o*-*u*t.fr
- o*-*e*t*o*v*.fr
- p*t*c*.fr
- r*g*n*-*a*l*a*a.com
- r*l*c*t*o*-*a*c*.fr
- r*n*v*t*o*-*o*t*r*-*o*l*u*e.com
- s*i*u*i*a*v*r*.com
- t*o*v*l*e*a*l*q*e*v*l*e.fr
- v*t*e*e*t*i*u*-*u*s*a*t.fr
- w*i*e*-*a*t*u*.lu
- y*u*h*c*l*u*e.fr