WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: mfn-header-builder (Used by 855 domains)

Security snapshot

Across 855 mfn-header-builder WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 2% Grade B 2% Grade C 2% Grade D 7% Grade F 88%
Fail the header check (F)88%vs 82.5% avg
Leak usernames38%vs 38.5% avg
Expose a sensitive file2.3%vs 1.8% avg
Use HTTPS95%vs 96.2% avg

What stands out

TLDWP currently associates 855 indexed WordPress sites with mfn-header-builder, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 87.9% versus 82.5% overall (+5.4 percentage points).

HTTPS adoption is 95.3% vs 96.2% overall (-0.9 pp); Sensitive-file exposure is 2.3% vs 1.8% overall (+0.5 pp); Username enumeration is 38.4% vs 38.5% overall (-0.1 pp).

These are observational associations among sites where TLDWP detected mfn-header-builder, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside mfn-header-builder. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

mfn-header-builder Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
r*s*t.ru (WP 5.7.2) F Sep 9, 2026
a*t*i*h*u*e*e*t*l.com (WP 6.6.2) D Sep 9, 2026
p*a*f*r*d*u*z*m*h*i*v*s*i*g.nl (WP 7.0) A Sep 9, 2026
s*h*t*i*s*s*e*s.de (WP 7.1) F Sep 9, 2026
b*y*r*s*h*-*h*m*e*e*b*e*d*.de (WP 7.1) D Sep 9, 2026
l*g*t*t*r.co (WP 7.0.3) B Sep 8, 2026
n*s.rs (WP 7.0.4) D Sep 8, 2026
y*a*s*a*.com (WP 7.1) F Sep 8, 2026
m*d*c*n*e*c*s*a*i*a.com (WP 7.0.4) F Sep 8, 2026
g*e*c*-*y*r*s.eu (WP 7.0.2) F Sep 8, 2026
l*s*k*r*f*s*o*e*a*i.no (WP 6.4.10) F Sep 8, 2026
l*c*e*e*m*s*a*e*g*e*.org (WP 6.8.8) F Sep 8, 2026
g*o*d*n*-*r*s*u*e.de (WP 7.1) F Sep 8, 2026
a*-*n*n.lt (WP 6.7.7) F Sep 8, 2026
d*-*l*n*a*.com (WP 7.1) F Sep 8, 2026
k*l*y*u*i*f*r*i*e.org (WP 7.1) F Sep 8, 2026
t*a*l*e*a*p*n*s.fr D Sep 8, 2026
f*r*v*r*n*l*s*i*.com F Sep 8, 2026
t*u*b*u*p*d*a*r*c*h*r*p*.com (WP 7.0.3) F Sep 7, 2026
m*-*o*s*a*e.com (WP 7.1) C Sep 7, 2026
t*o*f*r*i*g.net F Sep 7, 2026
e*p*m*n*o*.com F Sep 7, 2026
m*f*n*s*i*g.com (WP 7.1) F Sep 7, 2026
l*n*g*.c*m.my (WP 5.8.13) F Sep 7, 2026
a*i*a*c*m*u*i*a*i*n*l*n*t.com (WP 7.0.4) F Sep 7, 2026
a*i*a*c*m*u*i*a*i*g.com (WP 7.0.4) F Sep 7, 2026
s*l*h*r*.com (WP 7.1) C Sep 7, 2026
k*r*f*d*.com (WP 7.1) F Sep 7, 2026
k*r*d*n*a*c*n*e*.com F Sep 7, 2026
a*e*i*r*e*a*c*i*e*.com (WP 6.5.10) F Sep 7, 2026
r*t*o*x*e*i*n*e*c*.com (WP 7.1) F Sep 7, 2026
e*c*l*c*.com F Sep 7, 2026
s*l*s.com (WP 7.1) F Sep 7, 2026
e*-*e*l.com C Sep 6, 2026
d*n*p*n.com (WP 6.9.4) F Sep 6, 2026
m*a*t*r*o*i*h*e.com (WP 5.2.21) F Sep 6, 2026
b*y*h*r*c*n*e*.org (WP 7.1) F Sep 6, 2026
v*s*a*o*u.org (WP 7.0.4) F Sep 6, 2026
d*s*r*f*o*e*t*u*s.com (WP 7.1) F Sep 6, 2026
k*e*l*n*.com F Sep 6, 2026
d*n*e*l*l*n*t*r*.com (WP 7.0.4) F Sep 6, 2026
r*s*d*n*i*l*e*r*a*t*.com (WP 6.9.4) F Sep 6, 2026
e*e*c*g*o*p.com (WP 6.7.7) F Sep 6, 2026
d*s*t*s*o*a*r*g*n*.com F Sep 6, 2026
a*d*e*i*i*e*a*t*n*.com (WP 5.6.10) C Sep 6, 2026
m*c*a*i*a*-*n*.ir (WP 6.2.11) C Sep 6, 2026
u*i*v*n*a*t*l*t.fi F Sep 6, 2026
r*g*n*v*l*e*s*n*e*n*t*o*a*.com (WP 6.9.4) F Sep 6, 2026
l*g*n*p*o*o*a*s.ch F Sep 6, 2026
s*e*i*e.com (WP 7.0.4) D Sep 6, 2026
y*-*p*.com (WP 6.8.8) F Sep 6, 2026
d*n*s*i*e*a.com (WP 7.1) F Sep 6, 2026
y*s*e*p*r*n*w*.com (WP 7.1) F Sep 6, 2026
m*x*g*a*e.com (WP 7.1) F Sep 6, 2026
y*s*i*n.com (WP 7.1) F Sep 5, 2026
h*s*i*h*i*t*s.fi (WP 7.1) D Sep 5, 2026
m*x*c*e*a*r*a.com F Sep 5, 2026
m*r*n*o*a.net (WP 7.1) F Sep 5, 2026
h*l*o*r*i*.com (WP 6.2.11) F Sep 5, 2026
r*d*a*n*t*i*m*.com (WP 6.9.4) F Sep 5, 2026
k*i*e*d*y.com (WP 6.7.7) F Sep 5, 2026
r*n*w*r*h*b*l*n*c.com (WP 6.3.10) F Sep 5, 2026
m*u*f*n*e*o*f*n*a*i*n.com F Sep 5, 2026
h*i*w*r*s*a*t.com (WP 7.1) F Sep 5, 2026
e*s*c*a*t*e*e*d*r.com F Sep 5, 2026
n*r*e*h*l*c*.com (WP 7.1) F Sep 5, 2026
o*r*d*k*a*z*e*m*r.pl (WP 6.5.10) F Sep 5, 2026
t*a*e*m*n*o*.com (WP 7.0.4) D Sep 5, 2026
u*e*.it (WP 6.7.7) F Sep 5, 2026
k*b*i*.com (WP 6.9.7) F Sep 4, 2026
c*a.c*m.hk (WP 7.1) B Sep 4, 2026
d*k*m*p*n*m*.com D Sep 4, 2026
d*l*a*o*n*r*p*r*.com (WP 7.0.4) F Sep 4, 2026
d*i*2*.com (WP 7.1) F Sep 4, 2026
s*i*h*r*n*e*a*.com D Sep 4, 2026
t*a*s*o*t*-*a*r*.com (WP 6.7.7) F Sep 4, 2026
d*e*o*m*r*a*i.com (WP 7.1) F Sep 4, 2026
d*e*a*u*d*g*t*l*l*.com (WP 6.8.8) F Sep 4, 2026
r*j*i*e*i*s*r*.com (WP 7.0.4) F Sep 4, 2026
p*r*e*t*u*i*.pl (WP 6.7.2) F Sep 4, 2026
j*l*e*l*h.com (WP 7.1) F Sep 4, 2026
o*u*d*d*y*n*.c*m.br (WP 7.1) F Sep 4, 2026
h*a*t*p*u*t*d*y.com (WP 6.1.1) F Sep 4, 2026
d*n*v*o*r*.bg (WP 7.0.4) F Sep 4, 2026
x*c*p*g*r*e*s.com F Sep 3, 2026
n*a*e*t*f*c*t*o*-*h*i*a*d.com (WP 7.1) F Sep 3, 2026
t*a*l*e*a*p*n*s.com D Sep 3, 2026
h*u*e*f*t*l*a*g*l*.it (WP 6.4.10) F Sep 3, 2026
k*s*r*p*r*i*s.com F Sep 3, 2026
s*a*t*o*f*i*n*s*.com F Sep 3, 2026
k*s*a*n*.com F Sep 3, 2026
e*s*n*i*l*y*l*n*.com (WP 7.1) F Sep 3, 2026
z*p*c*.com (WP 7.0.4) F Sep 3, 2026
e*s*y*a*e*s.com (WP 7.0.4) F Sep 3, 2026
h*c*f*t*.com B Sep 3, 2026
s*s*o*t*o.com (WP 7.1) F Sep 3, 2026
a*e*-*f*a.ir (WP 7.1) F Sep 3, 2026
d*s*e*i*.com (WP 7.1) D Sep 3, 2026
j*l*e*a*e*u*u*t*.com (WP 5.7.17) F Sep 3, 2026
k*d*w*r*d*u*.de (WP 6.9.7) F Sep 3, 2026