Security snapshot
Across 341 tabby-checkout WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 341 indexed WordPress sites with tabby-checkout, equivalent to 0% of the current WordPress dataset.
The largest measured difference is sensitive-file exposure: 5.6% versus 1.8% overall (+3.8 percentage points).
Header-grade F is 79.4% vs 82.6% overall (-3.2 pp); HTTPS adoption is 96.8% vs 96.3% overall (+0.5 pp); Username enumeration is 38.5% vs 38.6% overall (-0.1 pp).
These are observational associations among sites where TLDWP detected tabby-checkout, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside tabby-checkout. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
Tabby Checkout
Why Tabby: Tabby refers hundreds of thousands of shoppers to our partners via co-marketing campaigns. We are wherever your customers are. Sell on your website, in-store or in your app. Shoppers love the Tabby shopping experience with an industry leading net-promoter-score of 81. Interest-free instalments incentivise shoppers to choose Tabby over cash-on-delivery. Tabby is permitted by the Saudi Central Bank. Tabby is also Shari’ah-compliant, and PCI DSS certified. T…
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| i*t*.e*u.sa (WP 7.1) | 5.13.3· 60% conf. | F | Sep 10, 2026 | |
| d*f*n*i*-*.com (WP 7.1) | 5.13.3· 60% conf. | D | Sep 10, 2026 | |
| k*a*a*s*b*u*a*u*h*b*.com (WP 7.1) | — | F | Sep 10, 2026 | |
| o*v*g.com | — | F | Sep 10, 2026 | |
| t*e*u*l*t.sa | 5.13.3· 60% conf. | F | Sep 10, 2026 | |
| g*h*z*k*.com (WP 7.1) | 5.12.0· 60% conf. | F | Sep 10, 2026 | |
| f*k*r*l*u*.com (WP 6.8.6) | 5.6.7· 60% conf. | F | Sep 10, 2026 | |
| f*k*r*p*r*u*e*.com | — | B | Sep 10, 2026 | |
| z*f*r*z.com (WP 7.1) | 5.12.0· 60% conf. | F | Sep 9, 2026 | |
| g*d*s*o*t*.com (WP 7.0.4) | 5.12.0· 60% conf. | F | Sep 9, 2026 | |
| d*d*f*c*o*y*s*.com | 5.13.3· 60% conf. | D | Sep 9, 2026 | |
| o*e*a*r.com | — | F | Sep 9, 2026 | |
| h*p*t*s*p*l*e*.com (WP 6.8.1) | 5.8.4· 60% conf. | F | Sep 9, 2026 | |
| f*x*r*.com | 5.11.0· 60% conf. | F | Sep 9, 2026 | |
| d*z*-*e.com (WP 7.1) | 5.13.3· 60% conf. | D | Sep 8, 2026 | |
| h*g*s*r*e*j*w*l*y.com | — | F | Sep 8, 2026 | |
| s*u*p*i*t.com (WP 7.0.4) | — | F | Sep 8, 2026 | |
| r*i*o*o*i*e.com (WP 7.0) | — | F | Sep 8, 2026 | |
| o*n*a*t*r*s.com (WP 7.1) | — | D | Sep 8, 2026 | |
| m*d*c*n*n*t*i*i*n*t*a*s*.com | — | F | Sep 8, 2026 | |
| s*n*o*i.com | — | F | Sep 8, 2026 | |
| k*s*o*u*e.com (WP 7.1) | — | F | Sep 8, 2026 | |
| f*r*u*t*a*i*g.com (WP 7.1) | — | F | Sep 8, 2026 | |
| r*v*r*e*a*f*m*u*a*.com (WP 7.1) | — | B | Sep 7, 2026 | |
| r*t*o*a*a.com (WP 7.1) | — | F | Sep 7, 2026 | |
| o*a*a*a*l*r*.com (WP 7.1) | — | F | Sep 7, 2026 | |
| h*r*c*m*.com (WP 7.1) | — | F | Sep 7, 2026 | |
| w*s*b*e*e*t*o*i*s.com (WP 7.1) | — | D | Sep 7, 2026 | |
| d*s*g*e*c*o*c*k*.com (WP 7.1) | — | F | Sep 6, 2026 | |
| s*i*c*s*e*i*.com | — | D | Sep 6, 2026 | |
| m*y*a*-*t.com (WP 7.1) | — | D | Sep 6, 2026 | |
| k*m*r*c*s*e*i*s.com (WP 7.1) | — | B | Sep 6, 2026 | |
| p*i*t*o*q.ae (WP 7.0.4) | — | F | Sep 6, 2026 | |
| m*x*i*i*n*n*i*e.com (WP 7.1) | — | D | Sep 6, 2026 | |
| m*x*s*i*.com (WP 7.1) | — | F | Sep 5, 2026 | |
| r*f*a*p.com (WP 7.0) | — | F | Sep 5, 2026 | |
| m*w*h*b*t*r*.com | — | F | Sep 5, 2026 | |
| r*e*a*d*o*p*n*.com (WP 7.0.4) | — | F | Sep 5, 2026 | |
| d*m*h*i*e*t*n*i*n.com | — | F | Sep 5, 2026 | |
| v*l*n*i*s*o*.com (WP 7.0.4) | — | F | Sep 5, 2026 | |
| e*r*d*r*s.com (WP 7.1) | — | F | Sep 5, 2026 | |
| b*s*p*a*t*c*.ae | — | F | Sep 5, 2026 | |
| u*i*e*f*c*.com (WP 6.9.7) | — | F | Sep 4, 2026 | |
| e*i*a*e*e*s.com (WP 7.1) | — | F | Sep 4, 2026 | |
| l*n*e*p*r*s.ae | — | D | Sep 4, 2026 | |
| s*e*l*s*i*e.com (WP 7.1) | — | D | Sep 4, 2026 | |
| a*i*a*n.com (WP 7.0) | — | F | Sep 4, 2026 | |
| x*s*u*a.com (WP 7.1) | — | F | Sep 3, 2026 | |
| h*a*t*-*p*c.com (WP 7.0.4) | — | F | Sep 3, 2026 | |
| n*v*s*o*e.com (WP 7.1) | — | F | Sep 3, 2026 | |
| t*a*e*s*o*n*e*z*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| s*a*t*s*o*e*a*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*o*j*w*l*e*y.ae | — | F | Sep 3, 2026 | |
| g*e*l*n.ae (WP 7.0.1) | — | F | Sep 3, 2026 | |
| d*r*a*k*n*.com (WP 6.5.10) | — | F | Sep 3, 2026 | |
| k*y*n*t*r*.com | — | F | Sep 3, 2026 | |
| e*c*o*e*a*.com (WP 7.1) | — | F | Sep 2, 2026 | |
| s*i*-*e*g*t.com (WP 7.1) | — | F | Sep 2, 2026 | |
| j*h*o*r*s*.com (WP 6.9.4) | — | F | Sep 2, 2026 | |
| a*y*a*e*f*m*.com (WP 6.9.7) | — | F | Sep 2, 2026 | |
| c*p*o*n*c*s.com (WP 7.1) | — | F | Sep 1, 2026 | |
| d*a*b*o*s.com | — | F | Sep 1, 2026 | |
| m*r*k*h.com | — | F | Sep 1, 2026 | |
| h*r*i*n*e*e.com | — | F | Sep 1, 2026 | |
| r*n*h*m*.com (WP 7.0.4) | — | F | Sep 1, 2026 | |
| a*t*a*r*t*e*t.com (WP 7.1) | — | D | Sep 1, 2026 | |
| t*a*a*d.ae (WP 7.1) | — | F | Sep 1, 2026 | |
| z*i*e*e*s.com (WP 6.9.7) | — | F | Sep 1, 2026 | |
| e*i.e*u.sa (WP 7.1) | — | D | Sep 1, 2026 | |
| a*t*y*b*h*p.com (WP 7.1) | — | F | Sep 1, 2026 | |
| t*r*t*y*t.com (WP 7.1) | — | F | Sep 1, 2026 | |
| a*s*i*k*.com (WP 7.1) | — | D | Sep 1, 2026 | |
| m*r*o*h*n*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| a*r*y*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| a*r*d*a*i*r*u*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| y*r*c*n*u*t*n*.com (WP 7.1) | — | D | Aug 31, 2026 | |
| u*i*e*.ae | — | D | Aug 31, 2026 | |
| t*p*c*n*e*e*c*s.com (WP 7.0.4) | — | F | Aug 31, 2026 | |
| b*a*k*r*o*i*t*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| b*4*m*t*r.com (WP 7.1) | — | F | Aug 31, 2026 | |
| p*r*e*t*u*c*e.ae (WP 7.0.4) | — | C | Aug 31, 2026 | |
| r*i*y*l*u*s*g.com | — | F | Aug 31, 2026 | |
| a*n*c*l*e*t*o*.com | — | F | Aug 31, 2026 | |
| e*t*d*m*.com (WP 6.8.8) | — | F | Aug 30, 2026 | |
| a*m*h*a*i*-*i*e*.com (WP 7.1) | — | F | Aug 30, 2026 | |
| b*y*y.com | — | F | Aug 30, 2026 | |
| a*l*r*n*a*r*s.com (WP 7.1) | — | F | Aug 30, 2026 | |
| p*e*h*r*.ae (WP 7.1) | — | F | Aug 29, 2026 | |
| a*n*a*.com (WP 6.9.4) | — | A | Aug 29, 2026 | |
| s*l*r*s*o*u*i*n*.co (WP 7.1) | — | D | Aug 29, 2026 | |
| t*e*o*e*a*t.ae | — | F | Aug 29, 2026 | |
| p*r*m*d*h*a*t*.ae (WP 7.0.2) | — | F | Aug 29, 2026 | |
| d*s*g*e*.sa (WP 7.1) | — | D | Aug 29, 2026 | |
| e*a*o*f*c*a*.com | — | F | Aug 28, 2026 | |
| j*w*l*l*u*s*e*e*l*r*.com (WP 7.1) | — | F | Aug 28, 2026 | |
| t*c*y*h.com | — | F | Aug 28, 2026 | |
| t*b*s*u*.com | — | F | Aug 28, 2026 | |
| r*y*l*u*n*t*r*.ae | — | F | Aug 28, 2026 | |
| 9*1*e*d*.com (WP 6.9.1) | — | F | Aug 28, 2026 | |
| c*a*e*n*c*a*t*.com (WP 7.0.4) | — | F | Aug 28, 2026 |