WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,669 All ๐Ÿ—‚๏ธ 5,956 wp-content ๐Ÿ› ๏ธ 513 dev ๐Ÿงช 1,748 test ๐Ÿšง 333 staging ๐Ÿ’พ 635 backup ๐Ÿ“ฆ 483 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
o*f*r*d*i*e*i*.com ๐Ÿ”’ /old/ Unknown F โ€” Jul 12, 2026
r*g*s*.su ๐Ÿ”’ /dev/ 6.5.8 F โ€” Jul 12, 2026
a*c*t*g*l*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
n*r*h*r*m*c*i*a*l*g*l.com ๐Ÿ”’ /old/ 6.5.8 F ๐Ÿ‘ค Jul 12, 2026
z*s*o*a*.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 12, 2026
n*r*h*r*l*g*t*l*m*s*o*.com ๐Ÿ”’ /dev/ Unknown F ๐Ÿ”“ Jul 12, 2026
g*n*u*1*6*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*l*u*r*c*.c*.uk ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
g*n*u*1*6.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
s*y*l*t*g*n*y.com ๐Ÿ”’ /wp-content/ 6.5.5 F โ€” Jul 12, 2026
r*s*7*e*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*s*d*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
n*r*h*r*b*a*h*s*c*p*n*t*r*.com ๐Ÿ”’ /dev/ 6.9.4 F โ€” Jul 12, 2026
i*t*a*p.xyz ๐Ÿ”’ /backup/ Unknown F โ€” Jul 12, 2026
t*r*a*o*p*i*.com ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
e*i*n*c*l*c*a*h*n*.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
a*c*n*t*c*l*d.com ๐Ÿ”’ /wp-content/ 5.7.4 F โ€” Jul 12, 2026
m*r*i*g*o*s*r*c*i*n.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
s*y*i*e*t*e*c*.com ๐Ÿ”’ /wp-content/ 5.5.7 F โ€” Jul 12, 2026
t*t*l*o*l*t*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
c*n*e*t*t*h*n*i.sg ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
j*w*e*e*.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
c*-*z*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*s*r.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 12, 2026
h*r*m*n*a*d*i*.com ๐Ÿ”’ /dev/ 7.0 F ๐Ÿ”“๐Ÿ‘ค Jul 12, 2026
a*u*i*l.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
a*u*h*r*-*n*.com ๐Ÿ”’ /wp-content/ 6.0 F โ€” Jul 12, 2026
o*f*e*t*u*t*e.com ๐Ÿ”’ /dev/ 6.0.12 F โ€” Jul 12, 2026
s*e*q*s*m*b*a*a*i*i.com ๐Ÿ”’ /old/ 6.9.4 F โ€” Jul 12, 2026
z*r*q*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*q*e*c*n*v*s.com ๐Ÿ”’ /test/ 6.9.4 F ๐Ÿ‘ค Jul 12, 2026
a*u*n*p*l*n*m*.com ๐Ÿ”’ /test/ 5.7.15 F ๐Ÿ‘ค Jul 12, 2026
t*t*l*o*i*t*k*e*t*r.com ๐Ÿ”’ /backup/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
j*m*s*e*s*r*u*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*m*i*l*r.com ๐Ÿ”’ /wp-content/ 6.0.1 F โ€” Jul 12, 2026
t*t*l*o*s*h*l*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*7*w*n.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*r*a*b*t.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*9*1*.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*t*7*b*t.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
j*g*7.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
z*p*n*n.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
c*r*o*f*b.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
t*r*o*e*p*o*e.com ๐Ÿ”’ /wp-content/ 3.5 F โ€” Jul 12, 2026
t*t*l*i*a*e*s.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
t*r*o*u*i*n*r*e*o.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
r*p*e*e*-*i*e*o*g*r*e*.com ๐Ÿ”’ /staging/ Unknown F ๐Ÿ‘ค Jul 12, 2026
h*r*y*o*g*a*p*e*s.com ๐Ÿ”’ /old/ 7.0.1 F โ€” Jul 12, 2026
m*r*e*l*n*h*m*b*y*r*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*r*i*a*o*c*r*n*c*e*.com ๐Ÿ”’ /wp-content/ 6.6.2 B โ€” Jul 12, 2026