WordPress maintenance or security needs? Reach out!
TLDWP

Theme: chameleon (Used by 491 domains)

Security snapshot

Across 491 chameleon WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 2% Grade B 1% Grade C 0% Grade D 4% Grade F 93%
Fail the header check (F)93%vs 82.5% avg
Leak usernames54%vs 38.5% avg
Expose a sensitive file1.6%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 491 indexed WordPress sites with chameleon, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 53.8% versus 38.5% overall (+15.3 percentage points).

Header-grade F is 93.5% vs 82.5% overall (+11 pp); HTTPS adoption is 95.9% vs 96.2% overall (-0.3 pp); Sensitive-file exposure is 1.6% vs 1.8% overall (-0.2 pp).

These are observational associations among sites where TLDWP detected chameleon, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 20 domain endings
.com 380
.org 25
.net 13
.cz 9
.es 8
.de 5
.co.uk 4
.nl 4
.ru 4
.ca 4
.hu 4
.ch 3
.info 3
.nu 2
.fr 2
.pl 2
.ro 1
.se 1
DomainVersionExposuresHeadersLast Checked
m*n*f*a.org 2.0· 60% conf. F Sep 9, 2026
a*t*c*r*u*t*o*e*p*r*s.com (WP 7.1) F Sep 9, 2026
s*u*h*o*a*w*t*r.com (WP 6.8.8) F Sep 8, 2026
e*e*o*g*a*e.com (WP 4.4.33) F Sep 8, 2026
i*l*n*w*m*n.ca (WP 7.0.4) F Sep 8, 2026
o*d*s*e*h*c*a*i*l*s.com (WP 5.0.27) F Sep 8, 2026
o*d*s*e*h*c*o*a*e*.com (WP 4.9.31) F Sep 8, 2026
r*c*a*d*a*r*f*n*a*t.com (WP 6.4.2) F Sep 8, 2026
m*d*c*l*a*e*i*t*r*s*i*.com (WP 6.0.14) D Sep 8, 2026
k*t*m*n*i*i*i*e*t*u*a*t.com (WP 5.4.1) F Sep 8, 2026
b*a*s*n*o*g*n*a*d*e*l*s*a*e.com (WP 7.1) F Sep 8, 2026
b*a*i*i*p*o*o.com (WP 6.7.7) F Sep 8, 2026
h*g*l*n*s*o*l*n*.com (WP 7.1) F Sep 8, 2026
d*v*d*o*f*e*s*e*.com F Sep 8, 2026
k*s*m*r*e*s*r.com (WP 4.3.34) F Sep 8, 2026
k*s*m*r*v*l*a.com (WP 4.3.34) F Sep 8, 2026
a*n*c*a*t*l*i*s*n.com (WP 6.8.8) F Sep 8, 2026
d*v*o*r*o*u*i*n*.com (WP 7.1) F Sep 8, 2026
k*r*l*n*o*d.com (WP 4.9.6) F Sep 8, 2026
h*s*o*e*o*s*.com (WP 7.0.4) F Sep 7, 2026
r*v*o*l*.com (WP 7.1) F Sep 7, 2026
t*i*e*t*o*s*r*c*i*n.com (WP 7.0.4) F Sep 7, 2026
b*u*i*r*d*-*-*n*l*b*c*.com F Sep 7, 2026
e*e*u*i*e*o*i*g*.com (WP 7.0.4) F Sep 7, 2026
o*d*u*z*c*o*l.com (WP 5.9.16) F Sep 7, 2026
t*i*t*r*e*o*t*n*.com F Sep 7, 2026
o*d*n*p*.com (WP 7.1) F Sep 7, 2026
a*c*s.c*m.au (WP 5.9.10) F Sep 7, 2026
d*r*a*u*z*n*k*.com (WP 7.0.4) F Sep 7, 2026
e*c*e*a*i*g*e*-*o*n*l*a.com (WP 4.9.31) F Sep 7, 2026
e*c*l*b*r*o*c*e*g*s*r*i*e*.com (WP 7.0.4) F Sep 7, 2026
a*g*l*s*l*g*n*e*e*t*.com B Sep 7, 2026
k*m*e*l*w*l*e*t.com F Sep 6, 2026
t*i*i*y*a*t*s*l*g*a*d*.com (WP 7.0.4) F Sep 6, 2026
r*s*a*r*n*e*a*a*a*b*e.com (WP 4.9.31) F Sep 6, 2026
m*a*e*o*e*m*d*i*.com F Sep 6, 2026
d*s*g*a*u*s*n*.com (WP 6.8.8) D Sep 6, 2026
y*g*t*v*e.com (WP 6.2.11) F Sep 6, 2026
h*n*g*o*a*s.com (WP 7.0.4) F Sep 6, 2026
d*s*p*o*o*s*r*c*i*n.com F Sep 6, 2026
r*s*o*a*i*n*e*l*h*a*e.net (WP 7.0.4) F Sep 6, 2026
d*n*l*c*s.com (WP 7.0.4) F Sep 6, 2026
n*n*y.com (WP 6.1.12) F Sep 5, 2026
u*e*p*o*e*c*e*k*.c*.uk F Sep 5, 2026
a*e*e*l*p*e*s.c*.za F Sep 5, 2026
r*e*c*c*e*o*k*.com (WP 7.1) F Sep 5, 2026
d*e*p*r*d*a*m*r*.com F Sep 5, 2026
a*w*o*i*s.com F Sep 5, 2026
r*c*a*v*c.com F Sep 4, 2026
r*m*t*o.com F Sep 4, 2026
e*h*i*e*a*y.com B Sep 4, 2026
h*a*t*e*t*p*r*s.com F Sep 4, 2026
h*a*y*c*o*n*i*g.com F Sep 4, 2026
s*i*e*e*t*a*t*o*d.com F Sep 4, 2026
b*c*f*p*.com F Sep 4, 2026
a*l*a*l*i*e*e*t*4.fr F Sep 4, 2026
a*e*i*a*f*r*t*e*i*n.com F Sep 3, 2026
n*v*t*r.com F Sep 3, 2026
n*v*s*o*t*e*i*t*r.com F Sep 3, 2026
a*t*o*f*n*n*i*l*a*a*e*e*t.com F Sep 3, 2026
c*a*e*e*n*d*c*r*t*r*.c*.uk (WP 7.0.4) F Sep 2, 2026
c*t*d*a*a*i*o.c*m.ar F Sep 2, 2026
t*x*s*e*i*t*i*s*r*e*y.com F Sep 2, 2026
h*t*i*s*u*g*i.com F Sep 2, 2026
c*r*n*c*v*r*.com F Sep 2, 2026
t*s*a*.com F Sep 2, 2026
a*e*m*l*c*a*m*s*r*i*e*.com D Sep 2, 2026
a*e*m*l*c*a*m*.com D Sep 2, 2026
t*u*h*t*n*i*n.com F Sep 2, 2026
l*v*a*i*v*n*o*i.it C Sep 1, 2026
e*i*b*t*i*o*.com F Sep 1, 2026
n*r*h*o*e*i*n.com F Sep 1, 2026
t*r*n*o*o*t*m*t*i*t.com F Sep 1, 2026
a*a*d*e*t*n*r*p*i*i*v*n*.com F Sep 1, 2026
e*u*t*b*e*s.com F Sep 1, 2026
e*u*t*b*e*r*w*h*o*u*i*n*.com F Sep 1, 2026
t*n*i*c*a*h*i*g*p*r*.com F Sep 1, 2026
c*a*e*e*n*b*s*n*s*-*n*e*i*r*.c*.uk (WP 7.0.4) D Aug 31, 2026
s*n*u*o*o.ru F Aug 31, 2026
m*s*i*o*a*b*.com (WP 4.6.1) D Aug 31, 2026
j*s*p*n*e*k*r.com F Aug 31, 2026
s*s*r*u*.c*m.sg (WP 4.7.19) F Aug 31, 2026
l*n*r*t*a*t*l.com F Aug 31, 2026
m*r*a*o*a*e*l*s.com F Aug 31, 2026
f*n*i*g*e.co F Aug 31, 2026
t*e*w*g*o*p.com F Aug 31, 2026
r*i*b*w*e*r*.com F Aug 31, 2026
r*g*n*y*c*n*u*e*s.net F Aug 31, 2026
n*b*n*t*r*l*.com F Aug 31, 2026
r*i*c*v*r.com F Aug 30, 2026
a*i*b*l*a*s*c*e*.com F Aug 30, 2026
c*o*c*t*a*e*u*l*s*i*g.com F Aug 30, 2026
m*r*i*.com F Aug 30, 2026
t*o*s*o*p*y*h*l*g*s*s.com F Aug 30, 2026
h*n*s*o*n*n*i*s*l*n.com F Aug 30, 2026
n*a*o*p*n*.com F Aug 30, 2026
a*d*s*l*.com F Aug 30, 2026
h*m*l*o*-*e*c*.com F Aug 30, 2026
h*m*l*a*c*.com F Aug 29, 2026
m*n*s*r*u*e*i*s*o*.com F Aug 29, 2026