WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,403 All ๐Ÿ—‚๏ธ 5,703 wp-content ๐Ÿ› ๏ธ 510 dev ๐Ÿงช 1,743 test ๐Ÿšง 333 staging ๐Ÿ’พ 632 backup ๐Ÿ“ฆ 481 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
t*t*l*o*l*t*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
c*n*e*t*t*h*n*i.sg ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
j*w*e*e*.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
c*-*z*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*s*r.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 12, 2026
h*r*m*n*a*d*i*.com ๐Ÿ”’ /dev/ 7.0 F ๐Ÿ”“๐Ÿ‘ค Jul 12, 2026
a*u*i*l.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
a*u*h*r*-*n*.com ๐Ÿ”’ /wp-content/ 6.0 F โ€” Jul 12, 2026
o*f*e*t*u*t*e.com ๐Ÿ”’ /dev/ 6.0.12 F โ€” Jul 12, 2026
s*e*q*s*m*b*a*a*i*i.com ๐Ÿ”’ /old/ 6.9.4 F โ€” Jul 12, 2026
z*r*q*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*q*e*c*n*v*s.com ๐Ÿ”’ /test/ 6.9.4 F ๐Ÿ‘ค Jul 12, 2026
a*u*n*p*l*n*m*.com ๐Ÿ”’ /test/ 5.7.15 F ๐Ÿ‘ค Jul 12, 2026
t*t*l*o*i*t*k*e*t*r.com ๐Ÿ”’ /backup/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
j*m*s*e*s*r*u*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*m*i*l*r.com ๐Ÿ”’ /wp-content/ 6.0.1 F โ€” Jul 12, 2026
t*t*l*o*s*h*l*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*7*w*n.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*r*a*b*t.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*9*1*.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*7*b*t.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
j*g*7.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
z*p*n*n.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
c*r*o*f*b.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
t*r*o*e*p*o*e.com ๐Ÿ”’ /wp-content/ 3.5 F โ€” Jul 12, 2026
t*t*l*i*a*e*s.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
t*r*o*u*i*n*r*e*o.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
r*p*e*e*-*i*e*o*g*r*e*.com ๐Ÿ”’ /staging/ Unknown F ๐Ÿ‘ค Jul 12, 2026
h*r*y*o*g*a*p*e*s.com ๐Ÿ”’ /old/ 7.0.1 F โ€” Jul 12, 2026
m*r*e*l*n*h*m*b*y*r*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*r*i*a*o*c*r*n*c*e*.com ๐Ÿ”’ /wp-content/ 6.6.2 B โ€” Jul 12, 2026
t*t*2*8*.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*i*o*n*p*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*i*o*l*w*i*m*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*i*s*e*t*l*e*l*h*.com ๐Ÿ”’ /staging/ Unknown F ๐Ÿ‘ค Jul 12, 2026
z*n*c*r*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
x*1*3*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*a*i*h*o*s*l*i*g.com ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 12, 2026
e*i*f*a*c*s.com ๐Ÿ”’ /old/ 6.3.8 F ๐Ÿ‘ค Jul 12, 2026
r*p*d*l*b*l*x.com ๐Ÿ”’ /wp-content/ 5.6.4 F โ€” Jul 12, 2026
j*s*n*k.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*i*a*t*o*a*.com ๐Ÿ”’ /old/ Unknown F โ€” Jul 12, 2026
s*y*a*t*o*s.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
n*r*a*s*o*l*c*g*r*h*p.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*m*s*c*l.com /wp-content/ Unknown F โ€” Jul 12, 2026
n*r*a*f*u*d*t*o*r*p*i*e*p*r*s.com ๐Ÿ”’ /test/ 6.9.4 D โ€” Jul 12, 2026
s*y*i*s*r*i*e*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*i*s*s*a*i*i*t*r*p*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
b*i*h*m*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
p*a*o*k*o*i*a*s.c*.in ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 12, 2026