Security snapshot
Across 78 boxcar WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 1%
Grade B 0%
Grade C 1%
Grade D 9%
Grade F 88%
Fail the header check (F)88%vs 82.5% avg
Leak usernames33%vs 38.5% avg
Expose a sensitive file2.6%vs 1.8% avg
Use HTTPS95%vs 96.2% avg
What stands out
TLDWP currently associates 78 indexed WordPress sites with boxcar, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 88.5% versus 82.5% overall (+6 percentage points).
Username enumeration is 33.3% vs 38.5% overall (-5.2 pp); HTTPS adoption is 94.9% vs 96.2% overall (-1.3 pp); Sensitive-file exposure is 2.6% vs 1.8% overall (+0.8 pp).
These are observational associations among sites where TLDWP detected boxcar, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| h*j*p*u*.com (WP 6.8.8) | 1.1.30· 100% conf. | F | Sep 10, 2026 | |
| e*i*i*.de (WP 7.1) | — | F | Sep 6, 2026 | |
| a*c*a*s*l*s.com | — | F | Sep 5, 2026 | |
| r*n*a*p*i*h*i*a.com (WP 7.1) | — | F | Sep 5, 2026 | |
| k*i*o*a*t*s*n.com (WP 7.1) | — | F | Sep 5, 2026 | |
| d*l*a*s*n*a.com (WP 7.1) | — | D | Sep 4, 2026 | |
| r*b*i*t*u*o*.com (WP 7.1) | — | F | Sep 4, 2026 | |
| a*a*s*a*a*u*i*e*a.com | — | F | Sep 3, 2026 | |
| x*o*u*.com (WP 6.4.3) | — | F | Sep 3, 2026 | |
| r*o*a*a*s*m*l.com (WP 7.1) | — | D | Sep 2, 2026 | |
| x*-*k*r*c*r*-*k*c.com (WP 7.1) | — | D | Sep 2, 2026 | |
| b*o*i*l*c*t*o*.com (WP 7.1) | — | F | Sep 2, 2026 | |
| s*i*k*a*t*m*t*v*.com (WP 6.5.10) | — | F | Sep 2, 2026 | |
| e*i*u*o.com (WP 7.1) | — | F | Sep 1, 2026 | |
| a*t*p*s*.com (WP 7.1) | — | F | Sep 1, 2026 | |
| a*s*r*d*.com (WP 7.1) | — | F | Sep 1, 2026 | |
| r*m*i*n.com (WP 7.1) | — | F | Aug 31, 2026 | |
| a*-*a*n*v*r.com (WP 7.1) | — | F | Aug 31, 2026 | |
| l*c*t*o*b*o*i*.com (WP 7.1) | — | F | Aug 30, 2026 | |
| 8*6*7*.com | — | F | Aug 27, 2026 | |
| g*e*d*e*e*t*y*o*.pl (WP 7.0.2) | — | F | Aug 27, 2026 | |
| t*k*e*e*o*.com | — | F | Aug 27, 2026 | |
| q*f*a*s*b*r*c*.com (WP 6.9.7) | — | F | Aug 27, 2026 | |
| j*r*s*r*a.com (WP 7.1) | — | F | Aug 26, 2026 | |
| e*2*.africa (WP 6.9.7) | — | D | Aug 26, 2026 | |
| 4*4*o*o*s.com (WP 7.1) | — | F | Aug 26, 2026 | |
| j*n*j*r*v*s*l*c*.com (WP 7.1) | — | F | Aug 24, 2026 | |
| w*e*l*b*a*r*n*a*s.net | — | F | Aug 24, 2026 | |
| p*d*r*i*p*r*s.com (WP 7.1) | — | C | Aug 23, 2026 | |
| b*l*a*i*g*o*p.com (WP 7.1) | — | F | Aug 23, 2026 | |
| a*t*i*p*r*l*j*.com (WP 7.1) | — | F | Aug 23, 2026 | |
| b*a*t*h*b.com (WP 7.1) | — | F | Aug 20, 2026 | |
| p*o*r*v*a*t*s*l*s.com (WP 7.0.4) | — | F | Aug 19, 2026 | |
| a*r*c*b*s*n*s*g*o*p.com | — | A | Aug 18, 2026 | |
| b*d*o*t*c*-*v*o.c*m.ua (WP 7.0) | — | F | Aug 18, 2026 | |
| a*-*u*u*y*c*r*.com (WP 7.0.4) | — | F | Aug 17, 2026 | |
| s*e*i*l*r*m*t*r*.com (WP 7.0.4) | — | F | Aug 17, 2026 | |
| v*n*a*t*c.c*.uk | — | F | Aug 17, 2026 | |
| m*e*t*o*m*t*r*.com (WP 6.7.1) | — | F | Aug 17, 2026 | |
| d*b*i*p*r*p*r*.com (WP 7.0.4) | — | F | Aug 17, 2026 | |
| m*o*e*-*i*h*-*o*n*o*i*e.de | — | F | Aug 16, 2026 | |
| p*p*s*p*r*a*s.com (WP 7.0.4) | — | F | Aug 16, 2026 | |
| r*g*r*m*t*r*.ca (WP 7.0.4) | — | F | Aug 16, 2026 | |
| w*l*a*e*o*i*e*o*e*.com | — | F | Aug 16, 2026 | |
| s*n*o*e*o*o*s*x.com (WP 7.0.4) | — | F | Aug 15, 2026 | |
| c*a*-*a*t*q*e.fr (WP 7.0.4) | — | F | Aug 15, 2026 | |
| l*c*m*b*l*i*t*r.ir (WP 7.0.4) | — | F | Aug 15, 2026 | |
| v*l*k*n*.com (WP 7.0.4) | — | F | Aug 14, 2026 | |
| v*c*s*f*r*a*s.com (WP 7.0.4) | — | F | Aug 14, 2026 | |
| l*v*o*t*a*r*c*.c*.za (WP 7.0.4) | — | F | Aug 14, 2026 | |
| s*e*a*i*i*u*o.it | — | F | Aug 8, 2026 | |
| e*c*l*e*t*a*s.sk (WP 7.0.3) | — | F | Aug 8, 2026 | |
| l*k*m*o*t*a*s.sk | — | F | Aug 7, 2026 | |
| f*t*n*x*e*.c*m.sv (WP 7.0.2) | — | F | Aug 6, 2026 | |
| a*t*m*r*e*.de (WP 7.0.2) | — | F | Aug 4, 2026 | |
| m*r*e*e*y*j*p*n*i.pl (WP 7.0.2) | — | F | Aug 3, 2026 | |
| e*y*i*m*g*o*p.fr (WP 7.0.2) | — | F | Aug 2, 2026 | |
| m*r*a*h*s*n*l*a*t*.hu (WP 7.0.2) | — | F | Jul 31, 2026 | |
| a*t*v*n*.com | — | F | Jul 31, 2026 | |
| a*t*m*r*a*o*u*a*e*o.com (WP 7.0.2) | — | F | Jul 31, 2026 | |
| a*t*d*m*s.com (WP 6.5.5) | — | F | Jul 31, 2026 | |
| a*t*c*n*e*h*n*o*e*.com (WP 7.0.2) | — | F | Jul 31, 2026 | |
| a*t*c*n*e*-*a*n*v*r.com (WP 7.0.2) | — | F | Jul 31, 2026 | |
| t*e*a*l*r*c*a*s*c*n*s*o*t*c*r*.com (WP 6.9.1) | — | F | Jul 29, 2026 | |
| d*l*a*a*t*.ch (WP 7.0.2) | — | D | Jul 28, 2026 | |
| a*t*o*c*.vip (WP 7.0.2) | — | F | Jul 27, 2026 | |
| e*m*t*r*.az (WP 6.8.6) | — | F | Jul 26, 2026 | |
| a*c*e*t*d*a*t*s.com | — | F | Jul 26, 2026 | |
| a*t*r*n*v*.eu (WP 7.0.2) | — | D | Jul 26, 2026 | |
| a*t*o*c*s.com (WP 7.0.2) | — | F | Jul 24, 2026 | |
| m*d*e*t.c*.za | — | F | Jul 23, 2026 | |
| b*y*a*d*r*c*.com (WP 7.0.2) | — | F | Jul 22, 2026 | |
| d*a*t*m*b*e*e*.nl (WP 7.0.2) | — | F | Jul 22, 2026 | |
| e*a*t*9*.de (WP 7.0.2) | — | F | Jul 22, 2026 | |
| e*-*u*o*e*t*r*h*n*o*e*.de (WP 7.0.2) | — | F | Jul 22, 2026 | |
| d*j*r*s*o*.ru | — | F | Jul 22, 2026 | |
| r*d*a*n*l*y*w*n.com | — | F | Jul 22, 2026 | |
| k*b*i*c*r*.com (WP 7.0.2) | — | D | Jul 20, 2026 |
Page 1 of 1