WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,403 All ๐Ÿ—‚๏ธ 5,703 wp-content ๐Ÿ› ๏ธ 510 dev ๐Ÿงช 1,743 test ๐Ÿšง 333 staging ๐Ÿ’พ 632 backup ๐Ÿ“ฆ 481 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
t*u*e*w*e*l*.com ๐Ÿ”’ /staging/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
s*a*e*a*e*o*s*n*.com ๐Ÿ”’ /staging/ 7.0.1 F โ€” Jul 12, 2026
n*r*o*p*r*n*r*l*w.com ๐Ÿ”’ /wp-content/ 6.4.1 F โ€” Jul 12, 2026
t*s*r*-*a*r*l*v*.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 12, 2026
o*f*c*a*i*l*m*n*t*b*o*h*r*o*d.com ๐Ÿ”’ /wp-content/ 5.2.4 F โ€” Jul 12, 2026
a*2*r*d*n*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*r*s*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*s*b*m*s*n*e*o*i*.com ๐Ÿ”’ /wp-content/ 5.5.18 F ๐Ÿ‘ค Jul 12, 2026
m*r*o*e*l*d.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
z*e*a*.com ๐Ÿ”’ /backup/ 5.4.19 F ๐Ÿ‘ค Jul 12, 2026
j*a*k*e*i*t*y*t*.com ๐Ÿ”’ /wp-content/ 6.4.5 F โ€” Jul 12, 2026
b*g*o*.c*m.sg ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
t*u*b*l*o*t*r*i*e.com ๐Ÿ”’ /staging/ 7.0.1 F โ€” Jul 12, 2026
h*s*t*o*d*n*.com ๐Ÿ”’ /backup/ Unknown F โ€” Jul 12, 2026
a*-*m*i*c.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 12, 2026
m*r*e*n*s*n*a*a*n*o*e*i*.com ๐Ÿ”’ /test/ 5.9 F โ€” Jul 12, 2026
t*s*a*a*k*t*i*m.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
d*n*e*d*k*e*.com ๐Ÿ”’ /wp-content/ 5.1.18 F โ€” Jul 12, 2026
r*t*-*u*i.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*t*c*s*n*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*t*1*8*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*h*m*.com ๐Ÿ”’ /wp-content/ 6.4.5 F โ€” Jul 12, 2026
a*z*q*i*p*r*s.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
r*c*k*8*a.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*t*a*s*w*s*a*a.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
g*c*n*i*.c*.in ๐Ÿ”’ /wp-content/ 6.2.6 F โ€” Jul 12, 2026
a*e*p*c*.com /backup/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
n*r*h*e*n*n*o*n*a*i*n*e*a*r.com ๐Ÿ”’ /test/ 6.9.4 D โ€” Jul 12, 2026
x*-*9*j*d*u*h*c*f*a*4*.com ๐Ÿ”’ /test/ 6.1.10 F โ€” Jul 12, 2026
r*t*a*e*a*t*.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 12, 2026
a*e*t*s*o*i*t*s.com ๐Ÿ”’ /staging/ 5.5.18 F โ€” Jul 12, 2026
r*t*a*a*a*o*l*n*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
t*s*g*f.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
d*m*c*n*e*.com ๐Ÿ”’ /dev/ 6.9.4 F ๐Ÿ‘ค Jul 12, 2026
a*y*m*o*t.com ๐Ÿ”’ /test/ Unknown F โ€” Jul 12, 2026
t*e*d*a*i*s*n*i*e.com /wp-content/ 7.0.1 F โ€” Jul 12, 2026
a*y*u*v*i*e.com ๐Ÿ”’ /wp-content/ 7.0.1 C โ€” Jul 12, 2026
o*f*c*s*c*e*s*r*.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
d*l*a*f*u*d*t*o*r*p*i*c*n*r*c*o*s.com ๐Ÿ”’ /test/ 6.9.4 D โ€” Jul 12, 2026
c*a*i*y*i*h*.o*g.au ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
t*u*h*h*b*r.com ๐Ÿ”’ /wp-content/ Unknown C ๐Ÿ‘ค Jul 12, 2026
h*s*n*o*i*.com ๐Ÿ”’ /old/ Unknown F โ€” Jul 12, 2026
n*r*h*h*r*d*n*i*t*y*n*o.com ๐Ÿ”’ /wp-content/ 6.9.4 F ๐Ÿ‘ค Jul 12, 2026
a*e*i*b*b*s*a.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
r*t*h*s*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
r*s*i*i*o*s*l*a*t.com ๐Ÿ”’ /staging/ 6.7.5 F โ€” Jul 12, 2026
s*y*i*w*e*p*e*s*o*i*t*c*.com ๐Ÿ”’ /wp-content/ 6.2.2 F โ€” Jul 12, 2026
a*x*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
d*i*i*s*n*a*.com ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 12, 2026
m*r*v*n*u*e*r*v*l*x*e*i*i*n*.com ๐Ÿ”’ /test/ Unknown F ๐Ÿ‘ค Jul 12, 2026