Security snapshot
Across 58 merchant WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 0%
Grade B 0%
Grade C 0%
Grade D 7%
Grade F 93%
Fail the header check (F)93%vs 82.5% avg
Leak usernames43%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS98%vs 96.2% avg
What stands out
TLDWP currently associates 58 indexed WordPress sites with merchant, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 93.1% versus 82.5% overall (+10.6 percentage points).
Username enumeration is 43.1% vs 38.5% overall (+4.6 pp); HTTPS adoption is 98.3% vs 96.2% overall (+2.1 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected merchant, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| b*x*r*e*l*b*r*a*i*a.com (WP 7.0.2) | F | Sep 7, 2026 | |
| x*-*3*-*k*h*b*n*g.xn--p1ai (WP 7.1) | D | Sep 6, 2026 | |
| a*e*d*o*l*n*.ru (WP 6.4.3) | F | Sep 5, 2026 | |
| e*r*t*n*-*o*a.com (WP 7.1) | F | Sep 5, 2026 | |
| e*r*-*u*p*e*e*t*.com | F | Sep 5, 2026 | |
| u*i*h*m*r*d*.com (WP 7.1) | D | Sep 4, 2026 | |
| z*e*r*.com | F | Sep 1, 2026 | |
| t*r*n*o*o*k*i*l*c*n*o.com | F | Sep 1, 2026 | |
| r*g*o*s*l*n*a.com (WP 7.1) | F | Aug 30, 2026 | |
| s*o*-*l*m*t*.ru | F | Aug 30, 2026 | |
| y*u*m*r*h*n*c*m*a*y.com (WP 7.0.4) | F | Aug 30, 2026 | |
| l*t*l*m*t*a.com | F | Aug 28, 2026 | |
| r*-*y*o*.ru | F | Aug 28, 2026 | |
| r*m*k*n.ru (WP 7.0.4) | F | Aug 27, 2026 | |
| a*h*y*l*r*d*.com (WP 7.0.4) | F | Aug 27, 2026 | |
| s*a*a*v*k*.ru | F | Aug 27, 2026 | |
| a*e*a*d*r*a*g*e*n*o*s*s*l*r*d*.com (WP 7.0.4) | F | Aug 26, 2026 | |
| s*a*a*v*k*.com | F | Aug 25, 2026 | |
| m*o*h*p.ru (WP 7.0.4) | F | Aug 24, 2026 | |
| k*b*n*g*o*h*m.ru (WP 7.1) | F | Aug 22, 2026 | |
| g*r*d*v*t*v.com | F | Aug 19, 2026 | |
| m*t*e*.ru (WP 7.0.2) | F | Aug 16, 2026 | |
| a*m*x*.com (WP 7.0.4) | F | Aug 15, 2026 | |
| i*o*h*a*u*.com (WP 7.0.4) | F | Aug 14, 2026 | |
| a*o*y*y*r*a*.ru | F | Aug 14, 2026 | |
| e*v*l*.pro (WP 7.0.4) | F | Aug 14, 2026 | |
| e*v*l*.ru (WP 7.0.4) | F | Aug 13, 2026 | |
| p*o*e*t*o*l*.ru (WP 7.0.3) | D | Aug 8, 2026 | |
| t*a*e*l*i*g.ru (WP 6.7.6) | F | Aug 7, 2026 | |
| d*c*t*e*s*b.ru | F | Aug 7, 2026 | |
| b*r*c*b*k*t.ru | F | Aug 7, 2026 | |
| b*t*v*y*t*h*i*a.kz | D | Aug 6, 2026 | |
| b*g*a*i*n.shop (WP 6.7.5) | F | Aug 6, 2026 | |
| s*g*s*.ru | F | Aug 5, 2026 | |
| b*m*s*a*.ru (WP 7.0.2) | F | Aug 4, 2026 | |
| m*k*l*m*i*.ru (WP 7.0.2) | F | Aug 3, 2026 | |
| b*l*n*c*k*.ru | F | Aug 3, 2026 | |
| m*r*h*n*s*r*n*h*l*.com | F | Jul 31, 2026 | |
| t*e*o*n*l*v*n*.com | F | Jul 31, 2026 | |
| f*r*y*r*c*n*o.com | F | Jul 30, 2026 | |
| l*n*i*g*d*t.ru (WP 7.0.2) | F | Jul 29, 2026 | |
| s*o*t*p*e*i*.ru (WP 7.0.2) | F | Jul 28, 2026 | |
| g*e*o*y*e*t*n.com (WP 7.0.2) | F | Jul 27, 2026 | |
| f*l*p*o*f.ru | F | Jul 26, 2026 | |
| a*d*x*e*.ru | F | Jul 24, 2026 | |
| w*o*z*r*h.ru (WP 7.0.2) | F | Jul 24, 2026 | |
| s*g*n.ru (WP 7.0.2) | F | Jul 24, 2026 | |
| i*s*p*o.com (WP 6.8.6) | F | Jul 22, 2026 | |
| o*c*a*d*u*d*n*.com | F | Jul 20, 2026 | |
| m*r*h*n*s*t*.com | F | Jul 20, 2026 | |
| m*r*h*n*s*u*d*n*l*c.com | F | Jul 20, 2026 | |
| m*r*h*n*s*r*i*e*n*.com | F | Jul 20, 2026 | |
| m*r*h*n*p*o*e*s*r.com (WP 3.0.5) | F | Jul 20, 2026 | |
| m*r*h*n*f*e*a*e*s.com | F | Jul 20, 2026 | |
| m*r*h*n*a*v*n*e*i*a*c*n*.com | F | Jul 20, 2026 | |
| x*-*2*-*k*a*z*a*s*i*a*j.xn--p1ai | F | Jul 20, 2026 | |
| k*r*t*n*t*l*2*.com (WP 7.0.2) | F | Jul 18, 2026 | |
| m*d*s*v*r*n*.com (WP 7.0.2) | F | Jul 18, 2026 |
Page 1 of 1