WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 9,403 All ๐Ÿ—‚๏ธ 5,703 wp-content ๐Ÿ› ๏ธ 510 dev ๐Ÿงช 1,743 test ๐Ÿšง 333 staging ๐Ÿ’พ 632 backup ๐Ÿ“ฆ 481 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
w*d*c*t*o*.c*m.br ๐Ÿ”’ /backup/ 6.3.2 B ๐Ÿ‘ค Jul 13, 2026
k*w*t*d.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*o*o*r*y*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
o*k*a*d*o*n*y*r*s*e*.com ๐Ÿ”’ /wp-content/ 5.4.1 F โ€” Jul 13, 2026
o*d*r*t*o.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*a*i*g*e*a*m*d*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
h*w*i*s*i*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
k*w*s*k*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
q*c*a*g*.app ๐Ÿ”’ /old/ Unknown F โ€” Jul 13, 2026
z*r*t*i*t*n*n*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 13, 2026
k*w*n*o*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*a*i*g*i*e*o*t*n*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jul 13, 2026
a*a*e*e*u.ir ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 13, 2026
a*a*i*g*i*h*i*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*s*c*.ir ๐Ÿ”’ /wp-content/ 6.3.3 F โ€” Jul 13, 2026
h*w*i*o*o.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
r*t*7*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
r*t*7*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*o*a*s*f*h*c*r*b*e*n.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ“„โŒ Jul 13, 2026
n*u*b*r*k*h.com ๐Ÿ”’ /test/ Unknown F โ€” Jul 13, 2026
c*l*r*o*s*a*e*.c*.uk ๐Ÿ”’ /dev/ 7.0.1 F ๐Ÿ”“ Jul 13, 2026
e*e*v*t*c*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 13, 2026
o*a*a*p*.com ๐Ÿ”’ /staging/ 7.0.1 F โ€” Jul 13, 2026
k*w*l*u*u*.com ๐Ÿ”’ /test/ 4.9.26 F ๐Ÿ‘ค Jul 13, 2026
s*o*w*n*e*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*o*v*p*8*e*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
t*y*a*b.com ๐Ÿ”’ /wp-content/ 7.0 F ๐Ÿ‘ค Jul 13, 2026
s*n*u*n*a*g.com ๐Ÿ”’ /wp-content/ 6.9.4 F ๐Ÿ‘ค Jul 13, 2026
d*l*g*t*a*g*m*v*r*l*c.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
j*v*z*n.ir ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 13, 2026
s*n*a*f*h*b*r*e*i.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 13, 2026
b*u*b*x*n*e*a*t*v*.com ๐Ÿ”’ /test/ 6.9.4 D ๐Ÿ‘ค Jul 13, 2026
x*-*k*s*l*e*b*b.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
x*-*k*l*m*k*a*-*u*b.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*o*s*7*a.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
s*o*p*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
x*-*k*k*n*r*s*a*7*g.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
h*v*n*a*.com ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 13, 2026
s*o*r*j*m*o*8.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
a*a*e*r*p*r*v*d*o*.com ๐Ÿ”’ /backup/ 7.0.1 F โ€” Jul 13, 2026
r*c*a*a*.com ๐Ÿ”’ /wp-content/ 7.0.1 F โ€” Jul 13, 2026
s*o*p*n*s*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
p*u*u*d*j*s.md ๐Ÿ”’ /old/ 7.0.1 F โ€” Jul 13, 2026
h*v*l*h*e*h*o*o*u*i*n*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
e*c*e*a*e*l*.com /wp-content/ 7.0.1 F โ€” Jul 13, 2026
o*r*d*w*n*e.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
c*i*u*g*e*e*t*e*i*u*-*r*i*.fr ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jul 13, 2026
t*e*y*o*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jul 13, 2026
t*y*t*-*a*i.com ๐Ÿ”’ /test/ 6.3.8 F ๐Ÿ‘ค Jul 13, 2026
s*o*m*g*7*7.com ๐Ÿ”’ /wp-content/ 6.4.1 F โ€” Jul 13, 2026