WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,669 All ๐Ÿ—‚๏ธ 5,956 wp-content ๐Ÿ› ๏ธ 513 dev ๐Ÿงช 1,748 test ๐Ÿšง 333 staging ๐Ÿ’พ 635 backup ๐Ÿ“ฆ 483 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
t*t*2*8*.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*i*o*n*p*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*i*o*l*w*i*m*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*i*s*e*t*l*e*l*h*.com ๐Ÿ”’ /staging/ Unknown F ๐Ÿ‘ค Jul 12, 2026
z*n*c*r*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
x*1*3*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*a*i*h*o*s*l*i*g.com ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 12, 2026
e*i*f*a*c*s.com ๐Ÿ”’ /old/ 6.3.8 F ๐Ÿ‘ค Jul 12, 2026
r*p*d*l*b*l*x.com ๐Ÿ”’ /wp-content/ 5.6.4 F โ€” Jul 12, 2026
j*s*n*k.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
c*i*a*t*o*a*.com ๐Ÿ”’ /old/ Unknown F โ€” Jul 12, 2026
s*y*a*t*o*s.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
n*r*a*s*o*l*c*g*r*h*p.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*m*s*c*l.com /wp-content/ Unknown F โ€” Jul 12, 2026
n*r*a*f*u*d*t*o*r*p*i*e*p*r*s.com ๐Ÿ”’ /test/ 6.9.4 D โ€” Jul 12, 2026
s*y*i*s*r*i*e*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*i*s*s*a*i*i*t*r*p*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
b*i*h*m*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
p*a*o*k*o*i*a*s.c*.in ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 12, 2026
r*p*1*8.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
u*t*7*7*.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
z*m*a*i*t*r*a*i*n*l.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
h*r*d*n*a*.com ๐Ÿ”’ /test/ 6.4.8 F ๐Ÿ‘ค Jul 12, 2026
s*y*3*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
a*t*g*l*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*n*f*t.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
n*r*x*e*g.com ๐Ÿ”’ /dev/ 7.0.1 F โ€” Jul 12, 2026
n*r*t*u*r*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
l*s*a*a*a*a.com ๐Ÿ”’ /backup/ Unknown F โ€” Jul 12, 2026
t*s*a*a*i*u*i*a*.com ๐Ÿ”’ /dev/ Unknown F โ€” Jul 12, 2026
c*e*p*m*n*e*e*p*r*t*.com ๐Ÿ”’ /wp-content/ 6.6.4 F โ€” Jul 12, 2026
h*r*k*r*.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 12, 2026
n*r*k*g*o*e*h.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
t*t*i.org ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
t*r*n*i*a*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*r*s*i*t*n*.com ๐Ÿ”’ /wp-content/ 6.6.1 D โ€” Jul 12, 2026
t*r*p*o*u*a*i.com ๐Ÿ”’ /backup/ Unknown F โ€” Jul 12, 2026
m*r*e*i*g*h*i*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
a*t*n*y*o*p*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*o*y*o*e*a*t*e*s.com ๐Ÿ”’ /wp-content/ 6.8.5 F โ€” Jul 12, 2026
r*n*1*7.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
b*i*k*o*r*a*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
s*s*a*a*i.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
j*b*s*8*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
a*i*h*k*7*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
m*r*e*i*g*y*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
n*r*n*x*.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 12, 2026
e*e*9*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*e*9*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*e*8*s*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026