WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

10,076 All 6,718 wp-content 417 dev 1,738 test 256 staging 524 backup 423 old
Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious — it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
z*t*p*a*l*y.com /wp-content/ Unknown F Sep 3, 2026
a*c*n*l*.fr /test/ 7.1 F Sep 3, 2026
r*i*r*d*c*i*n*.com /wp-content/ 7.1 F Sep 3, 2026
x*-*m*b*3*8*d*.com /old/ 7.1 F Sep 3, 2026
k*y*8*8.com /wp-content/ Unknown F Sep 3, 2026
c*s*o*w*i*i*g*e*v*c*s*r*v*e*s.com /wp-content/ Unknown F Sep 3, 2026
h*y*7*.com /wp-content/ Unknown F Sep 3, 2026
b*b*r*7.net /wp-content/ Unknown F Sep 3, 2026
z*y*7*7*.com /wp-content/ 6.8.3 F Sep 3, 2026
k*y*4*.com /wp-content/ Unknown F Sep 3, 2026
e*h*a*e*e*g*.com /wp-content/ 7.1 F Sep 3, 2026
a*t*b*e*i*i*u*s.com /wp-content/ 6.4.3 F Sep 3, 2026
e*h*a*q*t*r.com /backup/ 6.7.1 F Sep 3, 2026
n*u*e*l*s*p*r*i*e.com /wp-content/ 7.1 F Sep 3, 2026
b*u*f*e*e*e*g*.com /wp-content/ Unknown F Sep 3, 2026
t*h*e*o*d.com /test/ Unknown D Sep 3, 2026
d*n*s*h*r*l*p*o*o*r*p*y.com /wp-content/ Unknown F Sep 3, 2026
d*n*s*h*r*l*.com /wp-content/ Unknown F Sep 3, 2026
a*t*a*e*.com /test/ 7.1 F Sep 3, 2026
w*d*c*t*o*.c*m.br /backup/ 6.3.2 B Sep 3, 2026
c*e*g*o*p.pk /wp-content/ 7.1 F Sep 3, 2026
e*h*a*s*y*a*.com /wp-content/ 7.1 F Sep 3, 2026
o*d*r*t*o.com /wp-content/ Unknown F Sep 3, 2026
k*w*s*k*7*.com /wp-content/ Unknown F Sep 3, 2026
s*a*m*s*q.biz /wp-content/ 7.1 F Sep 3, 2026
q*c*a*g*.app /old/ Unknown F Sep 3, 2026
k*w*n*o*o*.com /wp-content/ Unknown F Sep 3, 2026
z*r*t*i*t*n*n*.com /wp-content/ 7.1 F Sep 3, 2026
a*a*i*g*i*e*o*t*n*.com /wp-content/ 6.9.7 F Sep 3, 2026
a*a*i*g*i*h*i*s.com /wp-content/ Unknown F Sep 2, 2026
a*s*c*.ir /wp-content/ 6.3.3 F Sep 2, 2026
h*w*i*o*o.com /wp-content/ Unknown F Sep 2, 2026
e*e*v*t*c*.com /wp-content/ 7.1 F Sep 2, 2026
n*u*b*r*k*h.com /test/ Unknown F Sep 2, 2026
c*l*r*o*s*a*e*.c*.uk /dev/ 7.1 F Sep 2, 2026
k*w*l*u*u*.com /test/ 4.9.26 F Sep 2, 2026
o*a*a*p*.com /staging/ 7.0.4 F Sep 2, 2026
s*o*w*n*e*1.com /wp-content/ Unknown F Sep 2, 2026
k*w*i*s*o*b*n*l*d*s*.com /wp-content/ 7.1 F Sep 2, 2026
t*y*a*b.com /wp-content/ 7.1 F Sep 2, 2026
s*n*u*n*a*g.com /wp-content/ 6.9.7 F Sep 2, 2026
d*l*g*t*a*g*m*v*r*l*c.com /wp-content/ Unknown F Sep 2, 2026
s*o*t*m*a*g.com /wp-content/ 7.1 F Sep 2, 2026
a*r*m*r*u*t*c*u*a.com /wp-content/ 7.1 F Sep 2, 2026
j*v*z*n.ir /wp-content/ 7.1 F Sep 2, 2026
s*n*a*f*h*b*r*e*i.com /wp-content/ 7.1 F Sep 2, 2026
b*u*b*x*n*e*a*t*v*.com /test/ 7.1 D Sep 2, 2026
x*-*k*l*m*k*a*-*u*b.com /wp-content/ Unknown F Sep 2, 2026
s*o*s*7*a.com /wp-content/ Unknown F Sep 2, 2026
x*-*k*s*l*e*b*b.com /wp-content/ Unknown F Sep 2, 2026