Security snapshot
Across 42 sapor WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 0%
Grade B 0%
Grade C 0%
Grade D 7%
Grade F 93%
Fail the header check (F)93%vs 82.5% avg
Leak usernames67%vs 38.5% avg
Expose a sensitive file2.4%vs 1.8% avg
Use HTTPS95%vs 96.2% avg
What stands out
TLDWP currently associates 42 indexed WordPress sites with sapor, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 66.7% versus 38.5% overall (+28.2 percentage points).
Header-grade F is 92.9% vs 82.5% overall (+10.4 pp); HTTPS adoption is 95.2% vs 96.2% overall (-1 pp); Sensitive-file exposure is 2.4% vs 1.8% overall (+0.6 pp).
These are observational associations among sites where TLDWP detected sapor, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| r*h*a*f*o*.com (WP 7.0.4) | — | F | Sep 4, 2026 | |
| j*r*j*e*j*n.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*l*h*g*n*e*s.com (WP 7.1) | — | F | Aug 30, 2026 | |
| e*g*n*e*i*g*o*e*l*a*.com (WP 7.1) | — | F | Aug 29, 2026 | |
| r*s*a*a*e*y.blog | — | F | Aug 29, 2026 | |
| n*s*c*e*.org (WP 7.1) | — | F | Aug 27, 2026 | |
| b*t*a*y*v*g*n*i*c*e*.com | — | D | Aug 27, 2026 | |
| v*n*i*k.de (WP 6.9.1) | — | F | Aug 27, 2026 | |
| w*e*b*o*k*a*m.com | — | F | Aug 26, 2026 | |
| c*r*a*i*m*r*s*n*a*a*o*a*.com | — | F | Aug 25, 2026 | |
| p*e*g*s.me (WP 7.0.4) | — | D | Aug 25, 2026 | |
| 2*o*6*.com | — | F | Aug 23, 2026 | |
| p*e*g*s.com (WP 7.0.4) | — | D | Aug 22, 2026 | |
| m*j*e*o*e.com (WP 7.1) | — | F | Aug 22, 2026 | |
| b*h*m*s*e*d*r*.com | — | F | Aug 20, 2026 | |
| b*h*m*s*e*d*r.com | — | F | Aug 20, 2026 | |
| t*e*l*g*m*o*i*i*r.net | — | F | Aug 20, 2026 | |
| s*h*r*m*t*h*r*e.de | — | F | Aug 17, 2026 | |
| s*r*h*t*b*e.com (WP 7.0.4) | — | F | Aug 17, 2026 | |
| j*m*i*k*p*e*.com | — | F | Aug 15, 2026 | |
| v*p*a*e*.com | — | F | Aug 15, 2026 | |
| c*f*p*o*e*c*.hu (WP 7.0.3) | — | F | Aug 9, 2026 | |
| s*f*w*r*c*a*t.blog | — | F | Aug 7, 2026 | |
| c*m*u*i*n.ch (WP 6.9) | — | F | Aug 7, 2026 | |
| t*e*i*e*f*b*o*w*r*.com | — | F | Jul 30, 2026 | |
| c*r*l*n*d*n*l*.com | — | F | Jul 30, 2026 | |
| t*e*i*t*d*u*b*n*.com | — | F | Jul 29, 2026 | |
| t*c*4*o*m*n*t*e*.com | — | F | Jul 29, 2026 | |
| v*-*u*t*a*e*u*.com | — | F | Jul 29, 2026 | |
| v*r*u*l*t*r*o*c*p*.com | — | F | Jul 27, 2026 | |
| v*e*n*m*r*b.com | — | F | Jul 24, 2026 | |
| s*o*k*i*c*p*i*e*.com | — | F | Jul 24, 2026 | |
| v*c*y*u*e.com | — | F | Jul 24, 2026 | |
| o*c*c*.com | — | F | Jul 22, 2026 | |
| s*a*s*p*l*e*.com | — | F | Jul 22, 2026 | |
| e*i*p*a*t*s*v*t*e.world | — | F | Jul 22, 2026 | |
| u*a*o*e*e*a*o*i*a.com | — | F | Jul 22, 2026 | |
| s*a*p*o*r*o*r*e*s*u*i*.com | — | F | Jul 21, 2026 | |
| f*a*t*n*h*m*d*l*e*s*.com | — | F | Jul 21, 2026 | |
| r*b*r*b*l*k*o*t*c*l*u*i*t.com | — | F | Jul 20, 2026 | |
| d*l*n*y*o*l*y.com | — | F | Jul 20, 2026 | |
| b*i*t*n*r*c*.com | — | F | Jul 19, 2026 |
Page 1 of 1