WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

10,076 All 6,718 wp-content 417 dev 1,738 test 256 staging 524 backup 423 old
Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious — it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
o*f*c*a*m*s*g*a*d*h*n*.com /wp-content/ Unknown F Sep 2, 2026
e*s*y*u*u*u*u*s*.com /test/ 5.1.19 F Sep 2, 2026
b*o*p*b*i*a*i*n.com /wp-content/ 7.1 F Sep 2, 2026
d*l*a*e*e*u*o*.dev /wp-content/ Unknown F Sep 2, 2026
m*r*c*4*e*i*.com /wp-content/ 7.1 F Sep 2, 2026
h*s*t*e*k*d.com /staging/ 3.8 F Sep 2, 2026
t*u*e*w*e*l*.com /staging/ 7.1 F Sep 2, 2026
s*a*e*a*e*o*s*n*.com /staging/ 7.0.4 F Sep 2, 2026
t*s*r*-*a*r*l*v*.com /wp-content/ 7.1 F Sep 2, 2026
t*u*d*w*n*.com /test/ 7.1 F Sep 2, 2026
o*f*c*a*i*l*m*n*t*b*o*h*r*o*d.com /wp-content/ 5.2.4 F Sep 2, 2026
m*r*o*e*l*d.com /wp-content/ Unknown F Sep 2, 2026
b*g*o*.c*m.sg /wp-content/ 7.1 F Sep 2, 2026
h*s*t*o*d*n*.com /backup/ Unknown F Sep 2, 2026
m*r*e*n*s*n*a*a*n*o*e*i*.com /test/ 5.9 F Sep 2, 2026
h*s*i*u*i*.com /wp-content/ 7.1 F Sep 2, 2026
h*r*h*m*.com /wp-content/ 6.4.5 F Sep 2, 2026
a*e*p*c*.com /backup/ 7.1 F Sep 2, 2026
n*r*h*e*n*n*o*n*a*i*n*e*a*r.com /test/ 7.1 D Sep 2, 2026
r*t*a*e*a*t*.com /test/ 7.1 F Sep 2, 2026
x*-*9*j*d*u*h*c*f*a*4*.com /test/ 6.1.12 F Sep 2, 2026
a*e*t*s*o*i*t*s.com /staging/ 5.5.20 F Sep 2, 2026
r*t*a*a*a*o*l*n*.com /wp-content/ 6.9.4 F Sep 2, 2026
n*r*h*t*t*p*r*n*.com /test/ Unknown F Sep 2, 2026
d*m*c*n*e*.com /dev/ 6.9.7 F Sep 2, 2026
a*y*m*o*t.com /test/ Unknown F Sep 2, 2026
t*e*d*a*i*s*n*i*e.com /wp-content/ 7.1 F Sep 2, 2026
d*l*a*f*u*d*t*o*r*p*i*c*n*r*c*o*s.com /test/ 7.1 D Sep 2, 2026
c*a*i*y*i*h*.o*g.au /wp-content/ 7.0.4 F Sep 1, 2026
t*u*h*h*b*r.com /wp-content/ Unknown F Sep 1, 2026
n*r*h*h*r*d*n*i*t*y*n*o.com /wp-content/ 7.0.4 F Sep 1, 2026
j*m*t*r*p*r*.com /test/ 5.9.16 F Sep 1, 2026
a*e*i*b*b*s*a.com /wp-content/ 7.1 F Sep 1, 2026
r*t*h*s*.com /wp-content/ 7.1 D Sep 1, 2026
s*y*i*w*e*p*e*s*o*i*t*c*.com /wp-content/ 6.2.2 F Sep 1, 2026
r*s*i*i*o*s*l*a*t.com /staging/ 6.7.7 F Sep 1, 2026
d*i*i*s*n*a*.com /backup/ 7.1 F Sep 1, 2026
z*o*a*t.com /dev/ 6.8 F Sep 1, 2026
s*j*k.org /test/ 6.3.10 F Sep 1, 2026
p*g*i*.c*m.pg /old/ 7.1 F Sep 1, 2026
a*e*a*c*r*.com /old/ 6.8.5 F Sep 1, 2026
b*d*c*o*t*m*.org /test/ 7.1 F Sep 1, 2026
c*m*l*t*o*.com /wp-content/ Unknown D Sep 1, 2026
s*e*r*i*h*n*.c*.uk /dev/ 7.0.4 F Sep 1, 2026
p*t*u*a*t*s.lt /old/ 5.9.16 F Sep 1, 2026
b*i*a*s*a*t*b*.c*m.br /wp-content/ Unknown F Sep 1, 2026
o*g*b*k*s.c*m.br /wp-content/ Unknown F Sep 1, 2026
r*g*s*.su /dev/ 6.5.10 F Sep 1, 2026
h*c.n*t.pk /backup/ 6.8.8 F Sep 1, 2026
n*r*h*r*m*c*i*a*l*g*l.com /old/ 6.5.10 F Sep 1, 2026