--- title: "Download list of all Wordfence sites" description: "Every website running Wordfence, with domain, DNS, WHOIS, IP address, hosting country and global rank on each row. One file, rebuilt daily." url: https://webatla.com/technology/wordfence --- [Home](https://webatla.com/) › [Technologies](https://webatla.com/technology) › [Security](https://webatla.com/technology?category=Security) › Wordfence ![Wordfence logo](https://webatla.com/assets/tech-logos/wordfence.png) # Download websites that use Wordfence 149 live sites using Wordfence right now Security · by Defiant Inc. · since 2011 · Freemium 149 sites, Dataset updated · 2026-10-31 Categories [Security](https://webatla.com/technology?category=Security) [WordPress plugins](https://webatla.com/technology?category=WordPress%20plugins) [🔒 Get the list](https://webatla.com/technology/wordfence#preview) Requires a dataset purchase [Database preview](https://webatla.com/technology/wordfence#preview) [Versions](https://webatla.com/technology/wordfence#versions) [About Wordfence](https://webatla.com/technology/wordfence#overview) [Download](https://webatla.com/technology/wordfence#buy) All figures as of Oct 31, 2026 149 websites using Wordfence ## Preview Wordfence site datasets Wordfence detection is a value inside the **Technologies** column. Two datasets carry it. **Technologies · €159 / month · 149 rows · 14 columns · webatla-technologies-wordfence-2026-10-31.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | festivaldelgiornalismo.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 104.21.51.24 | [US](https://webatla.com/country/us) | {…} | 2026-10-15 | PHP 8.3.30 , PWA, RSS, MySQL, HTTP/3, jQuery, Favicon, core-js, WordPress 7.1 , Wordfence 9.0.0 | 0.0000000901351 | 14,947,962 | 2006-09-20 | 2028-09-20 | | osservatoriocadelmonte.it | [it](https://webatla.com/tld/it) | [it](https://webatla.com/tld/it) | ICANN | HTTP 200 | 89.46.109.149 | [IT](https://webatla.com/country/it) | {…} | 2026-10-10 | PHP, RSS, MySQL, HTTP/3, jQuery, Aruba.it, CookieYes 1.7.7 , MailChimp, WordPress, Wordfence 7.3.4 | 0.00000000885821 | 14,446,323 | 2008-11-17 | 2026-11-17 | | cheapestflights24.net | [net](https://webatla.com/tld/net) | [net](https://webatla.com/tld/net) | ICANN | HTTP 200 | 188.114.96.1 | [US](https://webatla.com/country/us) | {"facebook":["https://facebook.com/cheapestFlights24"]} | 2026-10-01 | PHP, RSS, MySQL, HTTP/3, jQuery, OceanWP 1.8.3 , Lightbox, WordPress, Wordfence 7.4.8 , Yoast SEO 14.4.1 | 0.00000000593495 | 10,626,666 | 2019-03-21 | 2027-03-21 | | sctoulon.fr | [fr](https://webatla.com/tld/fr) | [fr](https://webatla.com/tld/fr) | ICANN | HTTP 200 | 217.160.0.60 | [DE](https://webatla.com/country/de) | {…} | 2026-10-26 | PHP, RSS, IONOS, MySQL, jQuery, Favicon, WordPress, Wordfence 9.0.2 , Yoast SEO 6.0 , Open Graph | 0.0000000058355 | 14,444,453 | 2016-03-15 | 2027-07-01 | | supremecrab.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 192.185.193.28 | [US](https://webatla.com/country/us) | {…} | 2026-10-26 | PHP, RSS, MySQL, Slick, HTTP/2, jQuery, Favicon, core-js, WordPress 7.1.3 , Wordfence | 0.00000000533119 | 12,662,507 | 2009-04-14 | 2031-04-14 | **All data · €599 / month · 149 rows · 23 columns · webatla-all-data-wordfence-2026-10-31.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | festivaldelgiornalismo.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 104.21.51.24 | [US](https://webatla.com/country/us) | {…} | 2026-10-15 | PHP 8.3.30 , PWA, RSS, MySQL, HTTP/3, jQuery, Favicon, core-js, WordPress 7.1 , Wordfence 9.0.0 | 2026-10-22 | TRUE | {…} | 0.0000000901351 | 14,947,962 | 2026-09-19 | RDAP | 2006-09-20 | 2028-09-20 | 2026-09-13 | Tucows Domains Inc. | {…} | Domain is active | | osservatoriocadelmonte.it | [it](https://webatla.com/tld/it) | [it](https://webatla.com/tld/it) | ICANN | HTTP 200 | 89.46.109.149 | [IT](https://webatla.com/country/it) | {…} | 2026-10-10 | PHP, RSS, MySQL, HTTP/3, jQuery, Aruba.it, CookieYes 1.7.7 , MailChimp, WordPress, Wordfence 7.3.4 | 2026-10-23 | TRUE | {…} | 0.00000000885821 | 14,446,323 | 2025-12-31 | WHOIS | 2008-11-17 | 2026-11-17 | 2025-12-03 | Aruba s.p.a. | {…} | Domain is active | | cheapestflights24.net | [net](https://webatla.com/tld/net) | [net](https://webatla.com/tld/net) | ICANN | HTTP 200 | 188.114.96.1 | [US](https://webatla.com/country/us) | {"facebook":["https://facebook.com/cheapestFlights24"]} | 2026-10-01 | PHP, RSS, MySQL, HTTP/3, jQuery, OceanWP 1.8.3 , Lightbox, WordPress, Wordfence 7.4.8 , Yoast SEO 14.4.1 | 2026-10-22 | TRUE | {…} | 0.00000000593495 | 10,626,666 | 2026-03-11 | RDAP | 2019-03-21 | 2027-03-21 | 2026-03-11 | NameSilo, LLC | {…} | Domain is active | | sctoulon.fr | [fr](https://webatla.com/tld/fr) | [fr](https://webatla.com/tld/fr) | ICANN | HTTP 200 | 217.160.0.60 | [DE](https://webatla.com/country/de) | {…} | 2026-10-26 | PHP, RSS, IONOS, MySQL, jQuery, Favicon, WordPress, Wordfence 9.0.2 , Yoast SEO 6.0 , Open Graph | 2026-10-16 | TRUE | {…} | 0.0000000058355 | 14,444,453 | 2026-07-11 | RDAP | 2016-03-15 | 2027-07-01 | 2026-07-01 | IONOS SE | {…} | Domain is active | | supremecrab.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 192.185.193.28 | [US](https://webatla.com/country/us) | {…} | 2026-10-26 | PHP, RSS, MySQL, Slick, HTTP/2, jQuery, Favicon, core-js, WordPress 7.1.3 , Wordfence | 2026-10-24 | TRUE | {…} | 0.00000000533119 | 12,662,507 | 2026-04-25 | RDAP | 2009-04-14 | 2031-04-14 | 2026-04-20 | GoDaddy.com, LLC | {…} | Domain is active | [↓ Download preview (20 rows, free)](https://webatla.com/api/v1/sample/technology/wordfence?dataset=technologies) [Buy Technologies · €159 / month](https://webatla.com/account/checkout?dataset=technologies) ## Version distribution We could read the version on 129 of the 149 sites running Wordfence. The shares below are of those sites. | Version | Sites | Share | | --- | --- | --- | | **7.4.14** | 37 | 28.7% | | 9.0.2 | 19 | 14.7% | | 9.0.1 | 10 | 7.8% | | 8.0.1 | 7 | 5.4% | | 7.5.2 | 6 | 4.7% | ## About Wordfence ### At a glance - **Vendor:** Defiant Inc. - **Website:** wordfence.com ↗ - **Language:** PHP - **License:** Freemium - **First release:** 2011-01-01 A security plugin that can be fingerprinted from the outside has, in a small way, given something away. Wordfence runs inside WordPress as PHP code on the server, filtering requests before the application sees them, scanning files for known malicious patterns and hardening the login form. Done quietly, none of that needs to be visible to a visitor. In practice, block pages, challenge screens, asset paths and version stamps leak, and the installs that leak are the ones we can count. That produces a number which must be read carefully. As of October 2026 we attribute the plugin to 149 sites. The figure is not an estimate of how many WordPress installations run it, and it should never be quoted as one. Server side plugins are systematically invisible to external detection, so what the count actually measures is the subset of deployments that expose an identifiable artifact. The true installed base is far larger than anything a crawl can see. The bias in that subset is the interesting part rather than a flaw to apologise for. A site that serves a recognisable block page or an asset path with a version in it is a site whose configuration was left close to default, which correlates with the sites least likely to have anyone tuning them. For a researcher studying how quickly security fixes actually reach ordinary websites, that population is not a poor sample. Neglected installs are the population under study. Version data supports the same line of work. Our records carry 35 distinct version strings for the plugin, 7.4.14 among them, which is a wide spread for a product that ships updates frequently and prompts administrators to apply them. A security tool running old code is a finding in itself, because the protective value of a firewall depends on its rule set being current, and a stale plugin can leave an operator feeling covered while the coverage has drifted. Some context on the product frames all of this. Sold by Defiant Inc. since 2011 under a Freemium model, it is aimed squarely at self managed WordPress sites, the ones without a security team behind them. Presence therefore implies a site owner who worried about compromise enough to act, but who is also running the platform that receives the most automated attack traffic on the web. The uses of a downloadable list follow from the bias, not despite it. Hosting companies check which of their customers are protecting themselves and which are not. Competing security vendors and managed WordPress providers look for accounts to approach. Researchers measure patch latency across a real population instead of a survey. A lookup on one domain answers a support question. Only the export supports counting, comparison across exports, and any claim about how a plugin ecosystem behaves over time. ## Frequently asked questions ### How to download the list of websites using Wordfence The complete list of websites using Wordfence is available as one structured file. Every row is a site we detected running Wordfence, exported with its full record, so you can filter it offline instead of crawling the web yourself. - **Choose a dataset** in the preview above or the price cards below - **Check out** by card or in crypto, priced in EUR - **Download the list** one JSONL file (zstd) in your account, which you can re-download any time during your access month What each file holds, for every site: - **Technologies:** the domain, the full stack we detect with versions, IP, hosting country, HTTP status, social profiles, PageRank / Harmonic rank and domain dates. - **All data:** every column in one file: the domain, technologies, IP, hosting country, rank and dates, plus DNS records and RDAP / WHOIS. - A daily-refreshed export, so the list you receive is never stale. ### How many websites use Wordfence? webatla detects Wordfence on 149 websites, refreshed daily. Each row has the domain with its IP, hosting country, ranking and the rest of its stack, and All data adds DNS and WHOIS. ### Can I download the list of websites using Wordfence? Yes, the list downloads as structured JSONL (zstd), one domain per line. ### What's included for each site, and how fresh is it? The Technologies file has the domain, the full stack with versions, IP, hosting country, HTTP status, PageRank and Harmonic. All data adds DNS and RDAP/WHOIS. Everything is re-detected and re-exported daily. ### How do I find the websites using Wordfence? Buy the technology dataset, then download the complete list of domains we detect using Wordfence, re-exported every day. ### What else is in the Wordfence technology data? Each row places Wordfence next to the other technology on the same site, plus its IP, hosting country and ranking. All data adds DNS and WHOIS. ### Can I download just the sites using Wordfence, or the whole database? Both. Every site running Wordfence comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export. ## Get the full list of websites using Wordfence Pick the dataset that covers what you need. Each one includes Wordfence and downloads as JSONL, rebuilt daily. Technologies, 14 columns Full website tech stack per site: CMS, payments, analytics, frameworks. €159 / mo [Buy and download](https://webatla.com/account/checkout?dataset=technologies) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=technologies) All data, 23 columns Everything we have, in a single package. The full webatla universe. €599 / mo [Buy and download](https://webatla.com/account/checkout?dataset=all-data) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=all-data) Want to compare every dataset side by side? [Visit the pricing page](https://webatla.com/pricing) ## Related technologies [![HSTS logo](https://webatla.com/assets/tech-logos/hsts.png) HSTS Security · 54.1M sites](https://webatla.com/technology/hsts) [![Cloudflare Bot Management logo](https://webatla.com/assets/tech-logos/cloudflare-bot-management.png) Cloudflare Bot Management Security · 13.4M sites](https://webatla.com/technology/cloudflare-bot-management) [![Elementor logo](https://webatla.com/assets/tech-logos/elementor.png) Elementor Website Builder · 7.7M sites](https://webatla.com/technology/elementor) [![Yoast SEO logo](https://webatla.com/assets/tech-logos/yoast-seo.png) Yoast SEO SEO · 7.1M sites](https://webatla.com/technology/yoast-seo)