WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,403 All ๐Ÿ—‚๏ธ 5,703 wp-content ๐Ÿ› ๏ธ 510 dev ๐Ÿงช 1,743 test ๐Ÿšง 333 staging ๐Ÿ’พ 632 backup ๐Ÿ“ฆ 481 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
h*y*o*e*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
t*e*r*w*r*j*c*.c*.uk ๐Ÿ”’ /wp-content/ 6.8.1 F โ€” Jul 13, 2026
h*y*i*t*k.com ๐Ÿ”’ /test/ 6.4.8 F ๐Ÿ”“ Jul 13, 2026
n*v*r*d*o*u*i*n.com ๐Ÿ”’ /test/ Unknown F โ€” Jul 13, 2026
s*p*o*a*a.com ๐Ÿ”’ /wp-content/ 6.7.1 F โ€” Jul 13, 2026
e*n*t*c*a*o*.com ๐Ÿ”’ /test/ Unknown F ๐Ÿ”“ Jul 13, 2026
j*m*n*i*7.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*a*l*i*l*d*a*a*e*y.com ๐Ÿ”’ /backup/ Unknown F โ€” Jul 13, 2026
m*a*d*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
m*r*h*n*e*.com ๐Ÿ”’ /staging/ Unknown F ๐Ÿ‘ค Jul 13, 2026
z*s*i*p*n*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
s*p*r*d*m*e*.com ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
l*g*t*o*c*m*n*c*c*o.c*m.br /wp-content/ 6.6.5 F โ€” Jul 13, 2026
s*t*y*.a*.id ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 13, 2026
w*m*n*e*l*h*e*.com ๐Ÿ”’ /wp-content/ 5.9 F โ€” Jul 13, 2026
p*r*n*i*g*c*o*s*u*t*r*s.org ๐Ÿ”’ /test/ 7.0 F โ€” Jul 13, 2026
k*t*n*.com ๐Ÿ”’ /wp-content/ 5.8.1 F โ€” Jul 13, 2026
b*s*s*r*p*e*a*t*f*.org ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 13, 2026
b*u*l*n*c*a.com ๐Ÿ”’ /wp-content/ 5.2.3 F ๐Ÿ‘ค Jul 13, 2026
c*o*b*x.hr ๐Ÿ”’ /test/ 7.0 F ๐Ÿ‘ค Jul 13, 2026
t*m*m*c*.com ๐Ÿ”’ /wp-content/ 7.0 F ๐Ÿ‘ค Jul 13, 2026
k*y*e*f*s*i*n*t*l*s.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
n*v*d*g*l*a*.com ๐Ÿ”’ /test/ 5.4.19 F โ€” Jul 13, 2026
s*-*0*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
c*t*s*f*r.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 13, 2026
e*k*m*n*t*o*b*t.com ๐Ÿ”’ /wp-content/ 4.7.4 F โ€” Jul 13, 2026
c*t*n*u*d*e.com ๐Ÿ”’ /wp-content/ 6.7.1 F โ€” Jul 13, 2026
d*n*i*t*y*p*d*a*r*c.com ๐Ÿ”’ /test/ 6.4.8 F โ€” Jul 13, 2026
z*u*l*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*w*h*n*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*a*o*s*f*w*r*s.com ๐Ÿ”’ /dev/ Unknown F ๐Ÿ‘ค Jul 13, 2026
t*w*s*.com ๐Ÿ”’ /wp-content/ 4.2.37 F โ€” Jul 13, 2026
n*v*7*s*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
z*t*a*s*l*t*o*s.com ๐Ÿ”’ /wp-content/ 6.8.3 F ๐Ÿ‘ค Jul 13, 2026
a*c*n*l*.fr ๐Ÿ”’ /test/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
z*t*p*a*l*y.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
r*i*r*d*c*i*n*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
x*-*m*b*3*8*d*.com ๐Ÿ”’ /old/ 7.0.1 F โ€” Jul 13, 2026
k*y*8*8.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
h*y*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
z*y*7*7*.com ๐Ÿ”’ /wp-content/ 6.8.3 F โ€” Jul 13, 2026
b*b*r*7.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
t*i*o*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
k*y*4*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
e*h*a*e*e*g*.com ๐Ÿ”’ /wp-content/ 7.0.1 F ๐Ÿ‘ค Jul 13, 2026
t*h*e*e*f*o*.com ๐Ÿ”’ /test/ Unknown D ๐Ÿ”“ Jul 13, 2026
t*h*e*o*d.com ๐Ÿ”’ /test/ Unknown D ๐Ÿ”“ Jul 13, 2026
d*n*s*h*r*l*p*o*o*r*p*y.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
r*d*p*o*e*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*t*a*e*.com ๐Ÿ”’ /test/ 7.0.1 F โ€” Jul 13, 2026