WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,403 All ๐Ÿ—‚๏ธ 5,703 wp-content ๐Ÿ› ๏ธ 510 dev ๐Ÿงช 1,743 test ๐Ÿšง 333 staging ๐Ÿ’พ 632 backup ๐Ÿ“ฆ 481 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
b*a*c*a*a*e*e*t.com ๐Ÿ”’ /old/ 5.1.19 F ๐Ÿ‘ค Jul 12, 2026
t*p*d*6*s*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
j*w*p*o*s*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
a*a*e*i*c*a*t.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*v*r*e*e*l*h.com ๐Ÿ”’ /wp-content/ 6.4.2 F โ€” Jul 12, 2026
g*-*a*i*.hr ๐Ÿ”’ /backup/ 4.7.29 F ๐Ÿ‘ค Jul 12, 2026
l*o*e*l*n*t*u*i*.com ๐Ÿ”’ /dev/ 6.7.5 F โ€” Jul 12, 2026
j*v*l*a*h*r.com ๐Ÿ”’ /backup/ 6.9.4 B ๐Ÿ‘ค Jul 12, 2026
j*v*b*a*t*c*i*i*.com ๐Ÿ”’ /wp-content/ 6.4.3 F โ€” Jul 12, 2026
o*o*t*f*u*d*t*o*r*p*i*.com ๐Ÿ”’ /test/ 7.0 D โ€” Jul 12, 2026
o*o*t*f*l*s*o*n*a*i*n*e*a*r.com ๐Ÿ”’ /test/ 7.0 D โ€” Jul 12, 2026
o*o*t*f*l*s*a*e*e*t*a*e*p*o*f*n*.com ๐Ÿ”’ /test/ 7.0 D โ€” Jul 12, 2026
o*o*t*b*s*m*n*w*t*r*r*o*i*g.com ๐Ÿ”’ /test/ 6.9.4 D โ€” Jul 12, 2026
n*n*o*y*.com ๐Ÿ”’ /wp-content/ Unknown D โ€” Jul 12, 2026
n*n*h*v*t*.com ๐Ÿ”’ /backup/ 6.1.10 F ๐Ÿ‘ค Jul 12, 2026
t*p*p*i*g*.com ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
a*s*y*d*f*h*n.com ๐Ÿ”’ /wp-content/ 6.1.10 F ๐Ÿ‘ค Jul 12, 2026
j*v*n*a*i*r*s.com ๐Ÿ”’ /test/ Unknown F โ€” Jul 12, 2026
s*l*m*p*.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
l*o*i*a*e*.com ๐Ÿ”’ /dev/ Unknown F โ€” Jul 12, 2026
t*p*r*l*n*.com ๐Ÿ”’ /test/ 6.4.6 F ๐Ÿ‘ค Jul 12, 2026
p*r*s*8*a*l*.com ๐Ÿ”’ /wp-content/ 6.8.3 F โ€” Jul 12, 2026
h*r*h*t*t*d*o.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*m*e*a*d.com ๐Ÿ”’ /test/ 7.0 F โ€” Jul 12, 2026
x*a*h*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
f*n*a*i*n*c*n*a*r*.org ๐Ÿ”’ /wp-content/ 3.9.1 F โ€” Jul 12, 2026
r*m*a*y*m.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
t*p*r*n*8.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*m*h*o*o*.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
x*t*c*y*t*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
o*i*e*.com ๐Ÿ”’ /old/ Unknown F โ€” Jul 12, 2026
t*n*s*u*n*s.com ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
t*p*o*r*n*b*c*c*e*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
x*8*s*o*.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
x*l*c*h*b.com ๐Ÿ”’ /backup/ 6.9.4 F ๐Ÿ‘ค Jul 12, 2026
a*s*g*i*s*r*n*e*u*e.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
x*a*o*o.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
x*a*o*l*t.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
w*1*8.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*t*g.com ๐Ÿ”’ /old/ 5.2.21 F โ€” Jul 12, 2026
l*o*a*r*c*.com ๐Ÿ”’ /test/ Unknown F โ€” Jul 12, 2026
t*p*i*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
m*l*s*a*u*k*n*m*y*r.c*m.au ๐Ÿ”’ /staging/ 6.9.4 F โ€” Jul 12, 2026
v*g*l*n*a*a*i*c*.it ๐Ÿ”’ /wp-content/ 6.0.12 F โ€” Jul 12, 2026
a*a*e*i*a*u*l*s.com ๐Ÿ”’ /test/ Unknown F ๐Ÿ‘ค Jul 12, 2026
x*y*u*g*n*i*h.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
a*r*y*d*e*p*r*s.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
c*s*.o*.ug ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
e*t*v*a*i*n.com ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
c*t*c*l*b.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026