Security snapshot
Across 436 touchy-by-bonfire WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 436 indexed WordPress sites with touchy-by-bonfire, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 24.5% versus 38.5% overall (-14 percentage points).
Header-grade F is 86.2% vs 82.5% overall (+3.7 pp); Sensitive-file exposure is 3.4% vs 1.8% overall (+1.6 pp); HTTPS adoption is 97.5% vs 96.2% overall (+1.3 pp).
These are observational associations among sites where TLDWP detected touchy-by-bonfire, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside touchy-by-bonfire. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
touchy-by-bonfire Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| a*s*r*l*a*g*u*m*t*i*t*.c*m.au (WP 7.1) | D | Sep 9, 2026 | |
| h*a*t*-*n*i*e.c*.il (WP 6.7.2) | F | Sep 8, 2026 | |
| s*u*i*d*l.c*.il (WP 6.2.2) | F | Sep 8, 2026 | |
| d*v*d*h*a*i*.com (WP 6.6.2) | F | Sep 8, 2026 | |
| h*g*q*a*i*y*a*e*.com (WP 6.0.14) | F | Sep 8, 2026 | |
| k*t*s*r*h*e*e*.com | F | Sep 8, 2026 | |
| a*l*n*e*n*t.c*.il (WP 6.6.2) | F | Sep 8, 2026 | |
| o*e*y*l*w.com (WP 5.8.1) | F | Sep 8, 2026 | |
| m*c*a*i*3*.com (WP 7.1) | D | Sep 8, 2026 | |
| a*i*h*r*h.c*.il (WP 7.0.4) | F | Sep 8, 2026 | |
| w*m*n*w*l*e*n*s*r*.com | F | Sep 8, 2026 | |
| v*l*e*a*s*t.at | F | Sep 7, 2026 | |
| m*s*i*y*.com (WP 6.6.2) | F | Sep 7, 2026 | |
| l*w*n.c*.il (WP 6.1.1) | F | Sep 7, 2026 | |
| w*a*t*b*i*d*r*c*m*u*i*y.com (WP 7.1) | F | Sep 7, 2026 | |
| y*s*f*p*.com (WP 6.1.1) | F | Sep 7, 2026 | |
| b*t*l*-*e*f*c*.com (WP 5.4.21) | F | Sep 7, 2026 | |
| v*t*g.info (WP 6.8.8) | F | Sep 7, 2026 | |
| e*a*-*e*h.com (WP 6.1.1) | F | Sep 6, 2026 | |
| r*s*a*r*n*e*e*i*q*e*u*e.com (WP 5.8.15) | F | Sep 6, 2026 | |
| b*r*a*a*a*m.c*.il (WP 6.6.2) | F | Sep 6, 2026 | |
| b*r*a*a*a*m.com (WP 6.6.2) | F | Sep 6, 2026 | |
| k*m*a*a*a*s.com | F | Sep 6, 2026 | |
| a*b*h*m*s.ca | D | Sep 6, 2026 | |
| j*s*t*a*n*n*.c*.uk | D | Sep 6, 2026 | |
| d*e*n*k*l*r.pl (WP 6.8.3) | F | Sep 6, 2026 | |
| s*c*a*g*o*e*e*t*.com (WP 7.1) | F | Sep 5, 2026 | |
| h*l*r*z*r*.com (WP 5.2.2) | F | Sep 5, 2026 | |
| d*l*a*a*e*i*m*g*a*i*n*e*v*c*s.com (WP 6.8.5) | F | Sep 5, 2026 | |
| t*e*t*g*o*p.com (WP 6.1.1) | F | Sep 5, 2026 | |
| t*a*a*o*a*z*.com (WP 6.9) | F | Sep 5, 2026 | |
| b*n*a*i*h*.com (WP 6.7.2) | F | Sep 5, 2026 | |
| d*t*u*s*l*b.nl | D | Sep 5, 2026 | |
| e*f*r*a.eu | B | Sep 5, 2026 | |
| h*b*r*d*n*a*.com | D | Sep 5, 2026 | |
| t*a*e*e*b*z.com | F | Sep 4, 2026 | |
| m*d*r*a.c*.il (WP 5.2.2) | F | Sep 4, 2026 | |
| n*-*e*.com (WP 6.1.1) | F | Sep 4, 2026 | |
| t*a*u*a*n*.c*.il (WP 6.1.1) | F | Sep 4, 2026 | |
| t*a*u*a.c*.il (WP 5.8.1) | F | Sep 4, 2026 | |
| n*l*w*r*.com | F | Sep 4, 2026 | |
| s*a*t*a*h*i*g*a*i*a.com | F | Sep 4, 2026 | |
| d*-*c*a*e*-*e*n*.de | A | Sep 4, 2026 | |
| e*t*e*c*i*i*.com (WP 6.9.5) | F | Sep 4, 2026 | |
| z*h*r*n*e*t.com (WP 6.1.1) | F | Sep 4, 2026 | |
| a*a*i*t*a*o.com (WP 7.0.2) | F | Sep 3, 2026 | |
| t*a*e*e*i*t*r*a*i*n*l.com | F | Sep 3, 2026 | |
| l*x*r*c*n*l*s*p*l*e*.c*m.au | F | Sep 3, 2026 | |
| z*v*r*n*.com (WP 6.1.1) | F | Sep 3, 2026 | |
| a*a*c*.com (WP 6.1.1) | F | Sep 3, 2026 | |
| z*s*u*e*s.com (WP 6.1.1) | F | Sep 3, 2026 | |
| j*r*d*f*n*e.fr (WP 6.9.7) | F | Sep 3, 2026 | |
| t*a*e*c*l*.com | F | Sep 3, 2026 | |
| t*a*y*m*i*r*t*o*s*r*i*e*.com (WP 6.8.3) | F | Sep 3, 2026 | |
| e*h*i*v.com (WP 6.8.8) | F | Sep 3, 2026 | |
| c*s*o*h*m*s*l*i*.com | F | Sep 2, 2026 | |
| h*v*t*e*e*.com (WP 6.1.1) | F | Sep 2, 2026 | |
| n*s*u*.com (WP 6.6.2) | F | Sep 2, 2026 | |
| t*u*s*e*h.com (WP 6.9.6) | F | Sep 2, 2026 | |
| m*r*a*e*h*a*a*a*r*p*.com | F | Sep 2, 2026 | |
| a*a*e*s*v*e*n*.com (WP 7.1) | F | Sep 2, 2026 | |
| t*u*d*i*r*e*.com (WP 6.4.2) | F | Sep 2, 2026 | |
| r*s*i*o*g*s*o*i*u.com (WP 7.1) | B | Sep 1, 2026 | |
| j*p*n*e*.com (WP 6.6.2) | F | Sep 1, 2026 | |
| c*m*i*g*a*u*a*h*a*t*.com | F | Sep 1, 2026 | |
| x*-*2*c*a*2*6*v*i*g*j*c*b*8*w*6*.com (WP 6.8.1) | F | Sep 1, 2026 | |
| j*o*s*t*i*.com (WP 6.6.2) | F | Sep 1, 2026 | |
| h*r*i*l*w*o.com | F | Sep 1, 2026 | |
| l*s*n*e*e*a*e*i*m*g*a*i*n*e*v*c*s.com (WP 6.8.8) | F | Sep 1, 2026 | |
| n*r*a*v*i*.com (WP 7.1) | C | Sep 1, 2026 | |
| e*a*-*.com (WP 5.8.2) | F | Sep 1, 2026 | |
| a*a*u*c*m*v*r*.com (WP 6.7.7) | F | Sep 1, 2026 | |
| h*r*a*h*r*m*k*s*a*.com (WP 6.8.1) | F | Sep 1, 2026 | |
| b*c*i*i*.c*.il (WP 6.1.1) | F | Aug 31, 2026 | |
| a*a*l*v.c*.il (WP 6.6.1) | F | Aug 31, 2026 | |
| a*p*a*l*n*.com (WP 6.1.1) | F | Aug 31, 2026 | |
| a*p*a*i*.com (WP 5.8.12) | F | Aug 31, 2026 | |
| t*l*o*f*c*2*.com (WP 6.5.10) | F | Aug 31, 2026 | |
| r*d*s*v*n*u*a.net (WP 6.9.7) | F | Aug 31, 2026 | |
| a*o*t*x.com (WP 6.9.7) | F | Aug 31, 2026 | |
| y*u*r*l*t*o*s*i*g*r*.com (WP 7.1) | F | Aug 30, 2026 | |
| h*n*c*a*a.com (WP 6.1.1) | F | Aug 30, 2026 | |
| h*m*n*m.com | C | Aug 30, 2026 | |
| s*n*a*b*l*j.com (WP 6.8.2) | F | Aug 29, 2026 | |
| k*y*a*t*e*.dk | C | Aug 29, 2026 | |
| j*m*i*a*h*e*c*a*r*a*i.com (WP 7.0.4) | F | Aug 29, 2026 | |
| h*l*e*u*a*-*o*r*.com (WP 6.1.12) | F | Aug 29, 2026 | |
| j*-*a*u*g*n.de (WP 7.0.3) | F | Aug 29, 2026 | |
| s*o*p*n*d*s*o*e*s.com | F | Aug 29, 2026 | |
| s*n*i*y*l*b.in (WP 6.9.1) | F | Aug 28, 2026 | |
| e*p*f*.com (WP 7.0.4) | F | Aug 28, 2026 | |
| h*c*a*g*o*p.com (WP 5.8.1) | F | Aug 28, 2026 | |
| c*a*t*i*l*i*d*a.com (WP 7.1) | F | Aug 27, 2026 | |
| z*h*r*w*o*.c*.il (WP 6.1.1) | F | Aug 27, 2026 | |
| g*o*a*b*o.c*.uk (WP 7.1) | A | Aug 27, 2026 | |
| t*l*n*p*a*t*t*o*.com | F | Aug 27, 2026 | |
| t*l*e*i*u*.com (WP 6.8.8) | F | Aug 27, 2026 | |
| 7*1*m*l*.com | F | Aug 27, 2026 | |
| a*e*j*o*c*w.com | F | Aug 27, 2026 | |
| g*d*n*a*m*d*c*n*.com (WP 5.7.17) | F | Aug 27, 2026 |