WordPress OSINT, maintenance or security needs? Reach out!
TLDWP
Warning: These sites show patterns commonly associated with malware, including obfuscated code (eval/base64), and known backdoor signatures. Site owners should investigate immediately.
Domain Malware Type Issues Headers Last Checked
t*k*o*o.com backdoor_signature F Sep 2, 2026
c*k*o*o.com backdoor_signature F Sep 2, 2026
d*c*a*i*n.com (WP 7.1) backdoor_signature F Sep 2, 2026
a*k*t*o*.com backdoor_signature F Sep 2, 2026
e*e*j*k*r*a.org backdoor_signature F Sep 2, 2026
s*a*a*d*r*s.com (WP 7.0) backdoor_signature F Sep 2, 2026
h*u*e*-*r*t*n*.com backdoor_signature F Sep 2, 2026
s*i*i*g*l*s*d*o*e*p*r*.com backdoor_signature F Sep 2, 2026
b*o*d*t*l*e*.com backdoor_signature D Sep 2, 2026
s*s*e*l*a*.com backdoor_signature F Sep 2, 2026
t*e*l*z*o*b*i*k*l*.com backdoor_signature F Sep 2, 2026
s*t*s*a*i*7*.lol backdoor_signature F Sep 1, 2026
t*t*t*c.com backdoor_signature F Sep 1, 2026
s*y*i*f*n*i*e.com backdoor_signature F Sep 1, 2026
n*r*n*.com (WP 6.9.7) gzinflate_eval F Sep 1, 2026
e*u*t*a*e*i*m*.com backdoor_signature D Sep 1, 2026
l*n*l*s*c.com backdoor_signature C Aug 31, 2026
2*0*.cc backdoor_signature D Aug 31, 2026
r*j*s*l*t*8.com backdoor_signature F Aug 31, 2026
t*i*a*a*g*o*p.com (WP 7.1) backdoor_signature F Aug 31, 2026
a*o*t*o*d*c*.com (WP 7.0.3) backdoor_signature F Aug 31, 2026
w*o*9*.com (WP 7.1) backdoor_signature F Aug 31, 2026
w*o*9.com (WP 7.1) backdoor_signature F Aug 31, 2026
w*o*8*s*o*.com (WP 7.1) backdoor_signature F Aug 31, 2026
w*o*8*.com (WP 7.0.4) backdoor_signature F Aug 31, 2026
w*o*3.com (WP 7.1) backdoor_signature F Aug 31, 2026
w*o*3*.com (WP 7.1) backdoor_signature F Aug 31, 2026
w*o*3*.com (WP 7.1) backdoor_signature F Aug 31, 2026
b*h*r*.ca (WP 7.1) backdoor_signature F Aug 31, 2026
c*a*h*a*r*n*a*i*d*a.com assert_backdoor F Aug 31, 2026
n*a*e*a*k*t*n*.com backdoor_signature F Aug 30, 2026
w*-*u*e.com backdoor_signature F Aug 30, 2026
b*k*d*.mt (WP 5.9.16) backdoor_signature F Aug 30, 2026
j*n*t*o*r*o*.c*.uk backdoor_signature F Aug 30, 2026
l*d*v*c*s*l.com backdoor_signature F Aug 30, 2026
s*i*l*a*k.dev backdoor_signature F Aug 30, 2026
n*t*h*m*.com backdoor_signature F Aug 29, 2026
j*e*s*e*a*z*.com (WP 7.1) backdoor_signature F Aug 29, 2026
a*l*a*c*v*y*n*e.com backdoor_signature D Aug 29, 2026
a*l*a*c*o*g*n.com backdoor_signature F Aug 29, 2026
j*e*o*o*u*i*.com backdoor_signature F Aug 29, 2026
r*0*-*h*l*.com backdoor_signature F Aug 29, 2026
w*r*-*h*p.com backdoor_signature F Aug 29, 2026
s*o*e*a*e*d*.com (WP 7.1) backdoor_signature F Aug 29, 2026
8*9*-*e*.com backdoor_signature F Aug 29, 2026
n*w*n*i*s.com backdoor_signature F Aug 29, 2026
t*i*i*y*o*a*a.com backdoor_signature F Aug 29, 2026
w*p*p.com backdoor_signature F Aug 28, 2026
b*a*w*b*.net (WP 5.7.17) base64_eval F Aug 28, 2026
h*c*i*g*a*e*.com (WP 6.9.7) backdoor_signature F Aug 28, 2026