WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,134 All ๐Ÿ—‚๏ธ 5,438 wp-content ๐Ÿ› ๏ธ 516 dev ๐Ÿงช 1,739 test ๐Ÿšง 330 staging ๐Ÿ’พ 631 backup ๐Ÿ“ฆ 479 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
s*p*r*8*a.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
p*e*i*u*n*w*t*r*.com ๐Ÿ”’ /old/ 6.5.8 F ๐Ÿ‘ค Jul 13, 2026
e*z*n*a*b*y*z*s*a*o*b*s*r*i*i.com ๐Ÿ”’ /wp-content/ 6.6 F โ€” Jul 13, 2026
t*s*a*h*t*g*a*h*.com ๐Ÿ”’ /backup/ 6.7.5 F ๐Ÿ‘ค Jul 13, 2026
m*r*u*e*a*l*o*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*h*a*p*n*s*u*i*s.com ๐Ÿ”’ /wp-content/ Unknown D โ€” Jul 13, 2026
z*i*t*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*p*4*1.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
h*s*w*n*.com ๐Ÿ”’ /wp-content/ 5.4.19 F ๐Ÿ”“๐Ÿ‘ค Jul 13, 2026
a*a*r*t*a*e*f*u*d*t*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*h*r*a*a*.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 13, 2026
r*v*a*i*m*t*.com ๐Ÿ”’ /wp-content/ 6.4.3 F โ€” Jul 13, 2026
b*o*s*n*e*.com ๐Ÿ”’ /wp-content/ 6.2.1 F โ€” Jul 13, 2026
h*s*a*v*s*r*.com ๐Ÿ”’ /test/ 3.7.38 F ๐Ÿ“ก Jul 12, 2026
h*s*a*a*d*l*a*l*w.com ๐Ÿ”’ /wp-content/ 6.1.1 F โ€” Jul 12, 2026
t*u*i*m*n*a*i*t*o*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
g*e*n*e*8*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
a*h*c*s.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
n*r*a*l*t*o.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
t*u*i*l*n*a.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
o*f*c*a*m*s*g*a*d*h*n*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*s*y*u*u*u*u*s*.com ๐Ÿ”’ /test/ 5.1.19 F ๐Ÿ‘ค Jul 12, 2026
d*n*e*l*b*l*a*i*.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 12, 2026
d*l*a*e*e*u*o*.dev ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jul 12, 2026
m*r*c*4*e*i*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
h*s*t*e*k*d.com ๐Ÿ”’ /staging/ 3.8 F ๐Ÿ”“๐Ÿ‘ค Jul 12, 2026
t*u*e*w*e*l*.com ๐Ÿ”’ /staging/ 7.0.1 F ๐Ÿ‘ค Jul 12, 2026
s*a*e*a*e*o*s*n*.com ๐Ÿ”’ /staging/ 7.0.1 F โ€” Jul 12, 2026
n*r*o*p*r*n*r*l*w.com ๐Ÿ”’ /wp-content/ 6.4.1 F โ€” Jul 12, 2026
t*s*r*-*a*r*l*v*.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 12, 2026
o*f*c*a*i*l*m*n*t*b*o*h*r*o*d.com ๐Ÿ”’ /wp-content/ 5.2.4 F โ€” Jul 12, 2026
a*2*r*d*n*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
e*r*s*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*s*b*m*s*n*e*o*i*.com ๐Ÿ”’ /wp-content/ 5.5.18 F ๐Ÿ‘ค Jul 12, 2026
m*r*o*e*l*d.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
z*e*a*.com ๐Ÿ”’ /backup/ 5.4.19 F ๐Ÿ‘ค Jul 12, 2026
j*a*k*e*i*t*y*t*.com ๐Ÿ”’ /wp-content/ 6.4.5 F โ€” Jul 12, 2026
b*g*o*.c*m.sg ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 12, 2026
t*u*b*l*o*t*r*i*e.com ๐Ÿ”’ /staging/ 7.0.1 F โ€” Jul 12, 2026
h*s*t*o*d*n*.com ๐Ÿ”’ /backup/ Unknown F โ€” Jul 12, 2026
a*-*m*i*c.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 12, 2026
m*r*e*n*s*n*a*a*n*o*e*i*.com ๐Ÿ”’ /test/ 5.9 F โ€” Jul 12, 2026
t*s*a*a*k*t*i*m.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
d*n*e*d*k*e*.com ๐Ÿ”’ /wp-content/ 5.1.18 F โ€” Jul 12, 2026
r*t*-*u*i.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*t*c*s*n*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
r*t*1*8*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026
h*r*h*m*.com ๐Ÿ”’ /wp-content/ 6.4.5 F โ€” Jul 12, 2026
a*z*q*i*p*r*s.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 12, 2026
r*c*k*8*a.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 12, 2026