Security snapshot
Across 23 gf-send-to-api WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 23 indexed WordPress sites with gf-send-to-api, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 0% versus 38.5% overall (-38.5 percentage points).
Header-grade F is 69.6% vs 82.5% overall (-12.9 pp); HTTPS adoption is 91.3% vs 96.2% overall (-4.9 pp); Sensitive-file exposure is 4.3% vs 1.8% overall (+2.5 pp).
These are observational associations among sites where TLDWP detected gf-send-to-api, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
gf-send-to-api Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| m*r*j*a*a*a*t*.org | F | Aug 30, 2026 | |
| s*o*t*e*a*.org | F | Aug 25, 2026 | |
| n*m*r*o*e*d*s*.org | F | Aug 25, 2026 | |
| d*u*p*l*c*.org | F | Aug 23, 2026 | |
| p*d*o*s*l*i*g.com (WP 6.6.7) | A | Aug 23, 2026 | |
| p*r*o*m*n*e*y*t*m*a*a*e*y.com (WP 6.6.7) | A | Aug 20, 2026 | |
| d*n*m*c*u*d*n*s.com | F | Aug 19, 2026 | |
| c*c*n*e*e*t*e.nl | F | Aug 18, 2026 | |
| d*u*p*l*c*a*l*a*c*.com | F | Aug 16, 2026 | |
| s*n*e*s*n*r*n*p*r*.com (WP 7.0.4) | D | Aug 15, 2026 | |
| s*f*t*1*t.org | F | Aug 6, 2026 | |
| l*n*e*m*t*.org | F | Aug 4, 2026 | |
| d*a*l*a*c*.org | F | Aug 4, 2026 | |
| s*o*h*e.com | F | Aug 3, 2026 | |
| f*m*.de | B | Aug 3, 2026 | |
| n*m*r*o*e*d*s*.com | F | Aug 2, 2026 | |
| d*m*n*e*v*n*t*o*.nl | D | Jul 31, 2026 | |
| g*e*n*o*s*c*d*m*.com (WP 6.6.5) | A | Jul 27, 2026 | |
| g*e*n*o*m*n*t*c*m*a*s.com (WP 6.6.5) | A | Jul 27, 2026 | |
| r*f*r*c*n*e*e*c*.org | F | Jul 23, 2026 | |
| v*l*t*o*c*p*t*l.com | F | Jul 22, 2026 | |
| k*h*p.com (WP 7.0.2) | F | Jul 21, 2026 | |
| c*p*r*n*r*.nl | F | Jul 20, 2026 |