WordPress OSINT, maintenance or security needs? Reach out!
TLDWP
Warning: These sites show patterns commonly associated with malware, including obfuscated code (eval/base64), and known backdoor signatures. Site owners should investigate immediately.
Domain Malware Type Issues Headers Last Checked
g*u*l.us assert_backdoor F Sep 6, 2026
n*g*t*e*w*r*.org backdoor_signature F Sep 6, 2026
t*z*w*.com backdoor_signature F Sep 6, 2026
v*c*l*u*g*.com backdoor_signature B Sep 6, 2026
e*e*t*a*e*p*r*.com backdoor_signature F Sep 5, 2026
n*a*y*.com (WP 7.0.2) backdoor_signature B Sep 5, 2026
n*v*c*e*t*v*.com (WP 7.1) backdoor_signature F Sep 5, 2026
h*l*a*w*e*.com backdoor_signature B Sep 5, 2026
b*o*d*a*-*t*r*g*.com backdoor_signature F Sep 5, 2026
h*a*d*s*o*.com backdoor_signature F Sep 5, 2026
m*s*v*t*r*.com backdoor_signature F Sep 5, 2026
e*e*t*o*e*v*c*.ro (WP 5.8.15) backdoor_signature F Sep 5, 2026
e*s*v*n*4.com (WP 6.4.1) backdoor_signature F Sep 5, 2026
m*t*g*a*s*i*.com (WP 7.1) backdoor_signature F Sep 5, 2026
t*n*i*o*l*n*.net backdoor_signature F Sep 5, 2026
r*d*a*a*y*e*u*i*y.com backdoor_signature B Sep 5, 2026
r*d*a*a*y.com backdoor_signature B Sep 5, 2026
r*d*c*n*r*.com backdoor_signature B Sep 5, 2026
v*-*1*.c*m.ua backdoor_signature F Sep 5, 2026
h*a*t*s*o*e*a*t.com backdoor_signature F Sep 4, 2026
h*r*k*j*n*w*n.co backdoor_signature F Sep 4, 2026
n*c*e*d*t*r*p*a.com backdoor_signature F Sep 4, 2026
i*a*e*g*a*d.c*.uk backdoor_signature F Sep 4, 2026
h*a*i*g*e*l*h*a*.com backdoor_signature F Sep 4, 2026
t*a*w*s*w*s*w*o*.com backdoor_signature F Sep 4, 2026
l*b*i*s*a*o*d.com backdoor_signature F Sep 4, 2026
i*c*v*n*k*t*h*n.com backdoor_signature F Sep 4, 2026
c*n*r*l*e*t*n*p*r*h*h*r*.com backdoor_signature F Sep 4, 2026
e*p*i*d*a.com backdoor_signature F Sep 4, 2026
r*c*i*i*g*r*e*o*.com (WP 7.1) backdoor_signature F Sep 4, 2026
a*m*r*b*e*l*t*e*.com (WP 7.1) gzuncompress_eval F Sep 4, 2026
z*u*l*o*b*o*d.com (WP 5.9.16) backdoor_signature C Sep 4, 2026
r*7*h*.com (WP 7.1) backdoor_signature F Sep 4, 2026
c*9*h*l*.com backdoor_signature F Sep 4, 2026
x*d*s.com backdoor_signature F Sep 4, 2026
j*s*m*s*c*o*u*i*n*.com backdoor_signature F Sep 4, 2026
a*e*i*u*g.com (WP 7.1) backdoor_signature C Sep 4, 2026
a*e*i*a*s*r*i*a*p*o*e*s*o*a*s.com (WP 7.1) backdoor_signature C Sep 3, 2026
v*t*l*n*s*l*t*o*s.com (WP 7.1) backdoor_signature C Sep 3, 2026
a*e*i*a*m*d*c*l*t*f*i*g.com (WP 7.1) backdoor_signature B Sep 3, 2026
t*a*l*l*z*r*o*f.com backdoor_signature F Sep 3, 2026
c*b*r*e*u*i*y*i*f*.com backdoor_signature F Sep 3, 2026
e*p*d*i*l*-*e*u*i*l*.com (WP 7.0) backdoor_signature F Sep 3, 2026
z*u*i*.com (WP 7.1) backdoor_signature F Sep 3, 2026
d*s*a*g*r*o*e*p*i*t.com backdoor_signature F Sep 3, 2026
r*g*c*p.no (WP 6.4.10) backdoor_signature F Sep 3, 2026
r*a*b*.com backdoor_signature F Sep 3, 2026
s*p*i*t*z*r.com base64_eval,backdoor_signature C Sep 3, 2026
t*d*r.dev backdoor_signature F Sep 3, 2026
c*s*m*n*i*p*r*.com backdoor_signature F Sep 2, 2026