Security audit results and indexed domain inventory for WordPress infrastructure utilizing dis-waf.
Security snapshot
Across 15 dis-waf WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 13 matching records in the cached metrics snapshot.
What stands out
TLDWP currently associates 15 indexed WordPress sites with dis-waf, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 0% versus 38.6% overall (-38.6 percentage points).
Header-grade F is 92.3% vs 82.6% overall (+9.7 pp); HTTPS adoption is 100% vs 96.3% overall (+3.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected dis-waf, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| e*o*e*e*i*q*e*a*e*i*a*a*g*l*g*u*s.fr | F | Sep 10, 2026 | |
| h*e*a*a*a*.com | F | Sep 10, 2026 | |
| k*r*m*o*.com | F | Sep 9, 2026 | |
| s*a*l*c*u*d*s*o*s*l*.com | F | Sep 9, 2026 | |
| o*r*g*y.com (WP 6.8.8) | F | Sep 8, 2026 | |
| e*p*t*p*r*n*r.com | D | Sep 7, 2026 | |
| d*s*i*a*i*n*c*r*a*s*n*e.com | F | Sep 7, 2026 | |
| r*s*a*r*n*l*c*a*.com | F | Sep 6, 2026 | |
| r*s*a*r*n*c*r*e*.com | F | Sep 6, 2026 | |
| r*s*a*r*n*-*e*e*a*l*.com | F | Sep 6, 2026 | |
| r*s*a*r*n*-*a*a*b*c*n*.com | F | Sep 6, 2026 | |
| r*s*a*r*n*-*h*z*h*i*t*n*.com | F | Sep 6, 2026 | |
| d*n*e*m*g*e*-*d*t*o*s.com (WP 6.7.7) | F | Sep 6, 2026 | |
| f*e*r*e*e*-*r*i*e*r.fr | F | Sep 6, 2026 | |
| r*s*d*n*e*e*i*e*t*-*a*n*s*e*t*e.com | F | Sep 6, 2026 | |
| r*s*d*n*e*o*s*.com | F | Sep 6, 2026 | |
| l*m*n*s*i*t*i*h*l.info | F | Sep 6, 2026 | |
| e*a*i*n*r*v*e*a.com | F | Sep 5, 2026 |