Security snapshot
Across 47 demo WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 2%
Grade B 0%
Grade C 0%
Grade D 11%
Grade F 87%
Fail the header check (F)87%vs 82.5% avg
Leak usernames62%vs 38.5% avg
Expose a sensitive file2.1%vs 1.8% avg
Use HTTPS100%vs 96.2% avg
What stands out
TLDWP currently associates 47 indexed WordPress sites with demo, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 61.7% versus 38.5% overall (+23.2 percentage points).
Header-grade F is 87.2% vs 82.5% overall (+4.7 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 2.1% vs 1.8% overall (+0.3 pp).
These are observational associations among sites where TLDWP detected demo, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| d*m*b*o*.hu (WP 4.9.31) | 1.2· 100% conf. | F | Sep 9, 2026 | |
| b*i*d*a*w*j.com | — | D | Sep 9, 2026 | |
| t*r*h*b.com (WP 7.1) | — | F | Sep 9, 2026 | |
| e*e*y*h*n*o*f*o*d.com (WP 6.9.7) | — | F | Sep 6, 2026 | |
| r*n*a*s*a*d*o*l*w.com (WP 6.9.7) | — | F | Sep 5, 2026 | |
| d*i*y*w*d*i*b*n*l*d*s*.com (WP 6.4.10) | — | F | Sep 5, 2026 | |
| b*a*r*n*a*s*a*l*s.com (WP 6.9.7) | — | F | Sep 4, 2026 | |
| b*a*r*n*a*s*t*h.com (WP 6.9.7) | — | F | Sep 4, 2026 | |
| t*u*b*s*c*l*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| p*u*a*a*e*c*.c*m.au | — | F | Aug 28, 2026 | |
| t*n*f*o*d*m*.com | — | F | Aug 27, 2026 | |
| t*k*h*s*i*e*s*t*.com (WP 6.9.4) | — | F | Aug 26, 2026 | |
| n*z*y*.cn | — | F | Aug 25, 2026 | |
| h*a*t*y*m*l*f*e*.com (WP 6.1.12) | — | F | Aug 21, 2026 | |
| t*o*v*t*n*a*d*s*o*t.be (WP 6.9.4) | — | D | Aug 21, 2026 | |
| a*o*h*r*o*a*n*e*t.com (WP 6.8.8) | — | F | Aug 20, 2026 | |
| e*g*e*o.com (WP 7.0.4) | — | D | Aug 19, 2026 | |
| p*r*d*s*p*l*.com | — | F | Aug 17, 2026 | |
| s*p*a*o*h*k*a*a*.com | — | D | Aug 16, 2026 | |
| g*n*s*a.com (WP 6.8.5) | — | F | Aug 16, 2026 | |
| u*v*a*d*o*l*w.com (WP 6.9.7) | — | F | Aug 16, 2026 | |
| u*v*e*t*l*s*g*o*g*.com (WP 6.9.7) | — | F | Aug 16, 2026 | |
| u*a*w*t*r*r*f*r*n*a*s.com (WP 6.9.7) | — | F | Aug 16, 2026 | |
| u*a*j*t*k*r*n*a*.com (WP 6.9.7) | — | F | Aug 16, 2026 | |
| r*x*t*d*o*.com (WP 7.0.3) | — | F | Aug 16, 2026 | |
| s*n*h*l*o*u*.com (WP 6.9.7) | — | F | Aug 15, 2026 | |
| f*h*e*t.com | — | F | Aug 15, 2026 | |
| k*s*k*w*.pl | — | F | Aug 5, 2026 | |
| d*c*d*c*e*i*n*n*-*l*e.de (WP 5.7.15) | — | F | Aug 3, 2026 | |
| b*u*n*u*g*w*s*f*l*n*s*e*.de (WP 5.7.15) | — | F | Aug 3, 2026 | |
| m*e*p*.jp | — | F | Aug 2, 2026 | |
| h*r*i*a*e*t*h*t*r*n*a*s.com (WP 6.9.5) | — | F | Jul 29, 2026 | |
| a*v*a*d*o*l*w.com (WP 6.9.5) | — | F | Jul 29, 2026 | |
| a*v*e*t*l*u*a*.com (WP 6.9.5) | — | F | Jul 29, 2026 | |
| a*v*e*t*l*s*n*h*l*o*.com (WP 6.9.5) | — | F | Jul 29, 2026 | |
| d*t*2*-*e*o.com (WP 7.0.2) | — | F | Jul 28, 2026 | |
| t*m*d*c*l*c*i*i*-*e*e*.com | — | F | Jul 28, 2026 | |
| b*n*o*o*k.net | — | F | Jul 27, 2026 | |
| l*a*e*.fr (WP 6.9.4) | — | F | Jul 27, 2026 | |
| l*k*p*w*l*j*t*k*.com (WP 6.9.5) | — | F | Jul 26, 2026 | |
| a*c*f*n*.com | — | A | Jul 24, 2026 | |
| s*i*n*b*r*.c*.uk (WP 6.9.5) | — | D | Jul 24, 2026 | |
| w*d*r*.com | — | F | Jul 24, 2026 | |
| s*g*o*g*a*v*e*t*l*.com (WP 6.9.5) | — | F | Jul 24, 2026 | |
| g*i*a*o*a*o*o.pl | — | F | Jul 23, 2026 | |
| s*-*e*r*e*a*v*r*n*a*s.com (WP 6.9.5) | — | F | Jul 21, 2026 | |
| t*u*b*s*c*l*.it | — | F | Jul 20, 2026 |
Page 1 of 1