WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: ko-fi-button (Used by 521 domains)

Security snapshot

Across 521 ko-fi-button WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 2% Grade C 3% Grade D 6% Grade F 87%
Fail the header check (F)87%vs 82.5% avg
Leak usernames49%vs 38.5% avg
Expose a sensitive file2.1%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 521 indexed WordPress sites with ko-fi-button, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 48.9% versus 38.5% overall (+10.4 percentage points).

Header-grade F is 87.5% vs 82.5% overall (+5 pp); HTTPS adoption is 95.6% vs 96.2% overall (-0.6 pp); Sensitive-file exposure is 2.1% vs 1.8% overall (+0.3 pp).

These are observational associations among sites where TLDWP detected ko-fi-button, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside ko-fi-button. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

Ko-fi Button

Ko-fi is a fast and friendly way to earn money from your blog, website or project. Create your free page at ko-fi.com in just a few minutes and link your PayPal or Stripe account to start receiving donations. Use the Plugin to add a Ko-fi button or donation panel to any widget area, sidebar or use the shortcode [kofi] to add a button to any page or post. Not sure where to start? Take a look at our guide!

Domain Exposures Headers Last Checked
k*t*t*e*l*o*t*r*a*.com (WP 7.1) F Sep 8, 2026
f*l*i*d*b*i*.ie (WP 7.1) F Sep 8, 2026
e*t*r*a*d*c*m*n*s.com (WP 6.8.2) F Sep 8, 2026
f*e*g*e*t*i*h*h*i*.com (WP 7.1) F Sep 8, 2026
d*v*i*c*o*i*g.com (WP 7.1) F Sep 8, 2026
s*n*l*r*c*e*p*a*n*d.com (WP 7.1) F Sep 8, 2026
o*7*e*.com (WP 7.1) F Sep 8, 2026
h*d*m*r*s*u*r*n*l*t*o*s.com (WP 7.1) F Sep 8, 2026
k*r*a*v*e*o.com (WP 7.0.4) F Sep 7, 2026
u*o*.town F Sep 7, 2026
s*a*i*l*t*e*.com (WP 7.1) F Sep 7, 2026
k*r*n*o*s.com (WP 7.1) F Sep 7, 2026
c*r*t*c*.io F Sep 7, 2026
r*v*s*d*e*p*c*.com (WP 7.1) F Sep 7, 2026
t*o*i*a*a*i*n.com F Sep 7, 2026
t*o*h*-*o*.com (WP 7.1) F Sep 7, 2026
h*y*m*m*k*r.com D Sep 7, 2026
r*t*o*a*e*o*e*s.com F Sep 7, 2026
a*g*y*n*m*b*t*h*s.com (WP 7.0.4) F Sep 7, 2026
r*t*r*i*p*o*r*s*.com (WP 7.1) F Sep 7, 2026
s*l*o*a*o*o*i*.com (WP 7.1) F Sep 7, 2026
e*o*e*i*-*c*e*c*s.com (WP 7.1) F Sep 7, 2026
a*g*l*k*r*a*i.com (WP 7.1) F Sep 7, 2026
c*i*p.in (WP 7.1) F Sep 6, 2026
v*l*e*h*b.com (WP 7.1) F Sep 6, 2026
d*n*e*s*f*o*.com (WP 6.9.4) F Sep 6, 2026
d*n*e*l*l*p*e*f.com (WP 7.1) F Sep 6, 2026
d*n*e*l*d*l*s*e.com (WP 7.0.4) F Sep 6, 2026
o*k*u*s*i*v*n*i*n*.com (WP 6.5.10) C Sep 6, 2026
d*n*e*a*g*z*a*.com (WP 7.1) F Sep 6, 2026
a*d*e*s*a*e*.com (WP 7.0.2) F Sep 6, 2026
n*o*y*r*c*p*s*o*.com (WP 6.3.10) F Sep 6, 2026
n*o*y*r*c*p*.com (WP 6.3.10) F Sep 6, 2026
m*x*t*o*t.com (WP 7.0.4) F Sep 6, 2026
r*n*a*i*.net (WP 7.1) C Sep 6, 2026
h*l*o*i*t*.com (WP 7.1) F Sep 5, 2026
b*o*f*o*i*.com (WP 7.1) F Sep 5, 2026
a*a*c*y*u*s.com (WP 7.0.4) F Sep 5, 2026
s*-*e*-*a*y.com F Sep 5, 2026
s*-*e*-*a*y*s*o*e.com F Sep 5, 2026
r*d*h*e*r*d*i*e.com (WP 7.1) F Sep 5, 2026
d*s*o*r*e*o*s*f*e*i*g.org (WP 7.0.4) F Sep 5, 2026
n*n*n*-*a*k*.com F Sep 5, 2026
a*o*i*c*o*l*t.com (WP 7.1) F Sep 5, 2026
d*m*g*d*t*e.com (WP 7.0.4) F Sep 5, 2026
d*m*-*o*i*e.com (WP 7.1) F Sep 5, 2026
t*a*a*t*r*.com (WP 7.1) F Sep 4, 2026
d*e*d*t*n*p*e*s.com (WP 7.1) F Sep 4, 2026
b*d*d*u*l*n*.com F Sep 4, 2026
d*l*n*e*.com (WP 7.1) F Sep 4, 2026
a*w*j*e*d*e*-*o*h*z*-*e*o*n.nl (WP 7.1) F Sep 4, 2026
b*n*a*i*b*a*m*n*.fr (WP 6.0.11) F Sep 4, 2026
t*o*e*a*d*o*e*.com (WP 6.5.10) F Sep 4, 2026
z*m*i*r*n*h*o*i*.com F Sep 4, 2026
a*e*i*a*t*.com (WP 7.1) F Sep 4, 2026
z*e*a*k.com (WP 7.0.4) F Sep 3, 2026
j*s*f*r*u*t*a*s.com F Sep 3, 2026
d*g*t*l*u*k*o*r*a*.com (WP 7.0.4) D Sep 3, 2026
s*u*-*p*a*-*e*l*n*.com D Sep 3, 2026
m*i*e*t.net (WP 7.1) F Sep 3, 2026
r*a*t*r*u*h*r*s*.com (WP 7.1) F Sep 3, 2026
j*n*f*o*b*t*y.com (WP 7.0.4) F Sep 3, 2026
m*r*m*a*d*e*.com F Sep 3, 2026
o*a*a*d*o*a.com (WP 7.0.4) F Sep 3, 2026
e*p*d*y*s*u*o.com (WP 7.1) F Sep 3, 2026
e*o*e*i*g*r*e*s*n.com F Sep 3, 2026
c*t*n*a*s*m*l*.com (WP 7.1) F Sep 3, 2026
t*e*k.com (WP 7.1) F Sep 3, 2026
n*t*o*t*d.com (WP 7.1) F Sep 2, 2026
c*r*e*f*r*o*e*m*l*.com (WP 7.1) F Sep 2, 2026
a*a*w.com (WP 7.1) F Sep 2, 2026
e*y*n*e*t*n*n*r*t*n*.com F Sep 2, 2026
z*e*a*f*o*a*v*n*u*e*.com (WP 7.1) F Sep 2, 2026
j*a*k*n*i*e.com C Sep 1, 2026
j*h*m*o*d.com (WP 7.1) F Sep 1, 2026
c*l*u*a*a*i*a*.com (WP 7.1) F Sep 1, 2026
o*-*l*-*l*c*s.com C Sep 1, 2026
b*f*n*r*j*c*.com (WP 7.1) F Sep 1, 2026
o*i*s*u*i*g*.com (WP 7.0.4) D Sep 1, 2026
c*n*n*m*k*r.com (WP 7.1) F Sep 1, 2026
h*r*j*g*r*a*.com F Sep 1, 2026
o*d*e*r*u*z*e*.com (WP 7.1) F Sep 1, 2026
j*y*u*m*c*o*e.com F Sep 1, 2026
c*h*r*o*.com (WP 7.1) F Sep 1, 2026
j*v*n*v*r*.com (WP 7.0.4) C Sep 1, 2026
n*m*p*l*n*.com F Aug 31, 2026
h*r*i*n*b*n*e*.com F Aug 31, 2026
a*u*k*y*i*p*r*s.com (WP 7.1) F Aug 31, 2026
n*k*o*m*g*z*n*.com F Aug 31, 2026
t*x*n*w*a*t*.uk (WP 7.1) F Aug 31, 2026
h*p*i*e*s*n*r*f*i*g.com (WP 7.1) B Aug 31, 2026
l*b*r*m*g*z*n*.com D Aug 31, 2026
n*t*e*w*i*d.net (WP 7.1) F Aug 31, 2026
n*d*c*u*r*l*e*.com F Aug 31, 2026
e*t*a*d*e*s*b*l*t*.com D Aug 31, 2026
j*v*n*v*r*.c*.uk (WP 7.0.4) C Aug 30, 2026
s*n*r*c*e*.com F Aug 30, 2026
b*s*u*t*i*r*g.com F Aug 30, 2026
r*d*n*o*e*i*h*.com (WP 7.1) F Aug 30, 2026
a*l*e*p*t*t*.com F Aug 30, 2026