Security audit results and indexed domain inventory for WordPress infrastructure utilizing istio-envoy.
Security snapshot
Across 107 istio-envoy WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 118 matching records in the cached metrics snapshot.
What stands out
TLDWP currently associates 107 indexed WordPress sites with istio-envoy, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 10.2% versus 82.5% overall (-72.3 percentage points).
Username enumeration is 0.8% vs 38.5% overall (-37.7 pp); HTTPS adoption is 83.1% vs 96.2% overall (-13.1 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected istio-envoy, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside istio-envoy. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| t*e*o*r*r*.c*.uk (WP 6.9.7) | C | Sep 8, 2026 | |
| k*s*i*y*a*k.com (WP 6.9.7) | C | Sep 8, 2026 | |
| k*s*i*s*t*n.com (WP 6.9.7) | C | Sep 8, 2026 | |
| s*n*r*e*.com (WP 7.1) | F | Sep 8, 2026 | |
| a*n*w*l*o*o*f*c*a*.com (WP 6.9.7) | C | Sep 8, 2026 | |
| s*n*f*p*r*y.com (WP 6.9.7) | C | Sep 8, 2026 | |
| a*n*m*r*a*.com (WP 6.9.7) | C | Sep 8, 2026 | |
| f*r*a*m*s*c.com (WP 6.9.7) | C | Sep 8, 2026 | |
| m*t*o*o*m*n.net (WP 6.9.7) | C | Sep 8, 2026 | |
| t*u*o*a*l*.com | A | Sep 8, 2026 | |
| y*n*m*a*i.com (WP 6.9.7) | C | Sep 8, 2026 | |
| u*h*i*t*t*e*a*a*o.com | A | Sep 8, 2026 | |
| f*s*e*b*k*c*u*.com | F | Sep 8, 2026 | |
| w*r*d*u*t*r*m*s*c.com (WP 6.9.7) | C | Sep 8, 2026 | |
| k*r*i*f*i*i*l.com (WP 6.9.7) | C | Sep 8, 2026 | |
| e*p*i*a*.com | C | Sep 8, 2026 | |
| h*t*l*m*n*e*u*r*a*i*r*a.com | A | Sep 8, 2026 | |
| b*a*l*y*a*s*a*l*f*i*i*l.com (WP 6.9.7) | C | Sep 7, 2026 | |
| s*m*k*n*o*p*a*e.com | C | Sep 7, 2026 | |
| a*e*d*d*c*m*r*i*.o*g.br (WP 7.0) | F | Sep 7, 2026 | |
| a*i*t*f*n*g*n*r*t*o*c*e*i*s.com (WP 6.9.7) | C | Sep 7, 2026 | |
| a*i*t*f*n*g*n*r*t*o*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| r*v*s*a*a*i*a*e*.com | F | Sep 7, 2026 | |
| t*a*o*i*e.world (WP 6.9.7) | C | Sep 7, 2026 | |
| k*r*j*b*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| d*s*r*y*o*e*y.net (WP 6.9.7) | C | Sep 7, 2026 | |
| h*t*l*i*i*r*.c*m.ar | A | Sep 7, 2026 | |
| h*t*l*r*z*n*u*u*n.com | A | Sep 7, 2026 | |
| h*t*l*n*t*a*t*r*s*.com | A | Sep 7, 2026 | |
| h*t*l*r*n*b*i*o*e*a*r.com | A | Sep 7, 2026 | |
| h*t*l*r*s*d*n*e*a*d*l*l*t*.com | A | Sep 7, 2026 | |
| h*t*l*r*n*.com | A | Sep 7, 2026 | |
| h*t*l*r*n*b*i*o*o*a*u*.com | A | Sep 7, 2026 | |
| h*t*l*r*z*s*l*a.com | A | Sep 7, 2026 | |
| h*t*l*r*n*b*i*o*a*l*t*.com | A | Sep 7, 2026 | |
| h*t*l*r*n*b*i*o*u*n*s*i*e*.com | A | Sep 7, 2026 | |
| a*v*r*z*r*u*l*e*.com | A | Sep 7, 2026 | |
| f*b*a*m*s*c.com (WP 6.9.7) | C | Sep 7, 2026 | |
| o*i*i*d*a*o.com (WP 6.9.7) | C | Sep 7, 2026 | |
| h*t*l*a*r*d*f*m*l*a*p*r*m*n*s.com | A | Sep 7, 2026 | |
| h*y*r*n*i*s.com (WP 6.9.7) | C | Sep 7, 2026 | |
| w*e*e*s*h*a*b*m.com (WP 6.9.7) | C | Sep 7, 2026 | |
| s*l*i*i*g.com | C | Sep 7, 2026 | |
| h*t*l*s*a*a*j*s.com | A | Sep 7, 2026 | |
| t*e*i*h*h*u*e*a*i*y.c*.uk (WP 6.9.7) | C | Sep 7, 2026 | |
| h*t*l*o*p*o.com | A | Sep 7, 2026 | |
| r*c*l*t*s*h*t*l.com | A | Sep 7, 2026 | |
| l*i*t.com | C | Sep 7, 2026 | |
| z*o*l*s.com | F | Sep 7, 2026 | |
| l*z*h*t*l*s.com | A | Sep 7, 2026 | |
| w*b*i*e*o*a*e*i*t*n*i*l*r*s*s.com (WP 6.9.7) | C | Sep 7, 2026 | |
| a*o*e*o*e*e*y*e*.org (WP 6.9.5) | C | Sep 7, 2026 | |
| r*t*i*k.com (WP 6.9.7) | C | Sep 7, 2026 | |
| n*x*d*o*.de | B | Sep 7, 2026 | |
| w*a*e*h*w*e*k*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| o*a*u*a*n*l*s*m*r*v*s*t*o*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| d*s*a*d*n*n*g*t*u*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| m*a*e*o*d*n*s*v*l*e.com (WP 6.9.7) | C | Sep 7, 2026 | |
| m*a*o*b*a*d*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| m*a.com (WP 6.9.7) | C | Sep 7, 2026 | |
| y*r*e*u*i*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| m*p*a.mx | F | Sep 7, 2026 | |
| y*p*e*r*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| h*r*a*o*e*p*n*z*o*f*c*a*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| f*a*n*c*s*.com (WP 6.9.7) | C | Sep 7, 2026 | |
| y*m*k*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| e*e*.c*m.mx | F | Sep 6, 2026 | |
| c*c*n*f*c*l.c*m.mx | F | Sep 6, 2026 | |
| c*s*o*o*i*a*.c*m.mx | F | Sep 6, 2026 | |
| h*t*l*e*l*s*v*r*a*l*e*.com | A | Sep 6, 2026 | |
| n*v*t*l*a*e*c*a*a*a*t.com | A | Sep 6, 2026 | |
| b*s*l*d*l*n*o*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| c*a*l*e*e*r.com (WP 6.9.7) | C | Sep 6, 2026 | |
| o*a*m*s*c.com (WP 6.9.7) | C | Sep 6, 2026 | |
| c*s*l*r*n*o.es | A | Sep 6, 2026 | |
| g*a*-*o*e*c*r*n*s*l.es | A | Sep 6, 2026 | |
| o*s*s*a*b*a*h*a*e.com | A | Sep 6, 2026 | |
| a*d*y*i*d*s.com (WP 6.9.7) | C | Sep 6, 2026 | |
| m*y*l*w*r*n*e*t*i*m*n*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| y*p*a*n*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| m*y*r*h*r*e*r*e*a*c*r.com | A | Sep 6, 2026 | |
| k*a*n*u*i*.com | C | Sep 6, 2026 | |
| k*t*t*m*e*t.c*.uk | C | Sep 6, 2026 | |
| e*e*y*h*n*j*z*.com (WP 6.6.7) | C | Sep 6, 2026 | |
| d*n*e*c*e*a*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| e*e*y*h*n*d*o*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| t*r*l*o*a*c*u*t.com | A | Sep 6, 2026 | |
| t*r*l*a*a*e*o*t*.com | A | Sep 6, 2026 | |
| e*y*i*b*r*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| o*l*f*.io | B | Sep 6, 2026 | |
| s*f*a*a*a*a*f*i*i*l.com (WP 6.9.7) | C | Sep 6, 2026 | |
| d*r*o*k*n*e*y.com (WP 6.9.7) | C | Sep 6, 2026 | |
| e*l*m*i.com (WP 6.9.7) | C | Sep 6, 2026 | |
| k*l*e*k*l*k.com (WP 6.9.7) | C | Sep 6, 2026 | |
| v*n*e*t*i*a*u*i*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| v*n*e*t*i*a.com (WP 6.9.7) | C | Sep 6, 2026 | |
| v*n*e*t*o*e*h*u*i*.com (WP 6.9.7) | C | Sep 6, 2026 | |
| a*h*b*n*s.c*.uk (WP 6.9.7) | C | Sep 6, 2026 | |
| d*n*i*g*i*h*h*d*v*l*h*a*t*f*t*r*i*g*v*r.com (WP 6.9.7) | C | Sep 6, 2026 | |
| d*r*m*e*o*d*.com (WP 6.9.7) | C | Sep 6, 2026 |