WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: kando-lucky-wheel (Used by 11 domains)

Security snapshot

Across 11 kando-lucky-wheel WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 9% Grade C 0% Grade D 9% Grade F 82%
Fail the header check (F)82%vs 82.5% avg
Leak usernames18%vs 38.5% avg
Expose a sensitive file9.1%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 11 indexed WordPress sites with kando-lucky-wheel, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 18.2% versus 38.5% overall (-20.3 percentage points).

Sensitive-file exposure is 9.1% vs 1.8% overall (+7.3 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Header-grade F is 81.8% vs 82.5% overall (-0.7 pp).

These are observational associations among sites where TLDWP detected kando-lucky-wheel, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

kando-lucky-wheel Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
m*f*l*o*.ir B Sep 7, 2026
c*a*s*c*a*e*.ir (WP 7.1) F Sep 6, 2026
c*a*s*c*n*.com (WP 7.1) F Aug 30, 2026
h*m*a*o*v.com (WP 7.1) F Aug 30, 2026
s*a*p*m*.com (WP 7.1) F Aug 25, 2026
p*k*s*p*n*l.ir (WP 7.1) D Aug 25, 2026
a*z*n*o*l*w.ir (WP 7.0.4) F Aug 23, 2026
m*m*a*p*n*l.ir (WP 7.0.3) F Aug 9, 2026
i*r*t.com (WP 7.0.2) F Jul 28, 2026
k*i.ir (WP 7.0.2) F Jul 21, 2026
s*b*r*m.com (WP 7.0.2) F Jul 21, 2026