WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

10,076 All 6,718 wp-content 417 dev 1,738 test 256 staging 524 backup 423 old
Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious — it can reveal uploads, plugin internals and backups.
Domain Exposed Directory WP Version Headers Other Issues Last Scanned
d*r*a*n*f*u*d*t*o*r*p*i*.com /test/ 7.0.2 D Sep 5, 2026
h*i*.c*m.br /wp-content/ Unknown F Sep 5, 2026
y*n*r*d*s*n*.com /wp-content/ Unknown F Sep 5, 2026
d*m*s*v*l*e*a*t*s*.com /wp-content/ 4.8 F Sep 5, 2026
o*m*s*s*i*c*e*.c*m.au /test/ 6.5.10 F Sep 5, 2026
h*m*i*.vn /wp-content/ Unknown F Sep 5, 2026
d*m*l*t*o*h*u*t*n*x.com /test/ 7.1 D Sep 5, 2026
t*a*e*l*n*-*i*s.com /wp-content/ 7.1 F Sep 5, 2026
y*n*e*t*o*i*s.com /test/ 6.9.7 F Sep 5, 2026
b*m*a*m*d*c*l*i*.org /wp-content/ 6.7.1 F Sep 5, 2026
y*n*u*v*.com /wp-content/ 5.8.7 F Sep 5, 2026
d*i*y*o*p*o*a*h.com /dev/ 7.1 F Sep 5, 2026
r*m*d*l*a.com /wp-content/ Unknown F Sep 5, 2026
y*n*o*g*s.com /wp-content/ 6.8.8 F Sep 5, 2026
e*c*l*e.com /dev/ 7.1 F Sep 5, 2026
e*a*d*o*.com /test/ 5.7.2 F Sep 5, 2026
d*i*y*e*i*.net /staging/ Unknown F Sep 5, 2026
a*a*.ir /test/ 6.1.12 F Sep 5, 2026
o*f*i*d*w*b.com /wp-content/ 7.1 F Sep 5, 2026
t*a*e*i*g*i*h*o*k*y*.com /wp-content/ 5.1.1 D Sep 5, 2026
y*n*n*r*a*.com /wp-content/ Unknown F Sep 5, 2026
k*b*l*2*.com /old/ Unknown F Sep 5, 2026
m*t*a*n*r*y.com /old/ 7.0.4 F Sep 5, 2026
n*m*n*r*.com /wp-content/ Unknown F Sep 5, 2026
d*1*0*i*h*b*t*r.com /wp-content/ 4.6.28 F Sep 5, 2026
y*m*c*a*s*i*u*i.com /wp-content/ 7.1 F Sep 5, 2026
t*a*e*h*a*h*a*h.com /wp-content/ 7.1 F Sep 5, 2026
w*b*a*.ca /dev/ 3.6 F Sep 5, 2026
a*t*a*g*.com /wp-content/ 7.1 F Sep 5, 2026
d*m*s*.com /wp-content/ Unknown F Sep 5, 2026
f*u*f*o*s.c*m.au /staging/ 6.6.7 F Sep 5, 2026
c*u*y.fr /wp-content/ 7.1 F Sep 4, 2026
r*c*e*h*o*u*i*n*l*.com /wp-content/ Unknown F Sep 4, 2026
r*d*i*h*a*t*a*d*u*t*r*.com /wp-content/ Unknown A Sep 4, 2026
u*i*e*s*e*g*l*.com /wp-content/ 7.1 F Sep 4, 2026
m*r*w*b.it /wp-content/ 5.4.21 F Sep 4, 2026
l*r*k*a*u*a*a*.com /wp-content/ Unknown F Sep 4, 2026
d*m*n*g*m*n*-*a*h*n*e.com /test/ 7.0.4 F Sep 4, 2026
r*c*u*t*e*d*f*t*e*s.com /wp-content/ Unknown F Sep 4, 2026
e*r*n*p*a.com /wp-content/ 7.1 D Sep 4, 2026
p*n*e*d.cloud /dev/ Unknown F Sep 4, 2026
i*e*s*o*r*w.us /backup/ Unknown F Sep 4, 2026
k*b*r*e*i*n*l.com /wp-content/ 7.1 F Sep 4, 2026
d*s*a*e*r*s*r*e*y.com /wp-content/ 7.1 F Sep 4, 2026
e*o*i*i*.com /test/ 7.0.2 F Sep 4, 2026
b*j*n*n*e*p*r*s.com /wp-content/ 6.8.1 F Sep 4, 2026
n*k*s*o*c*e*.com /wp-content/ 7.1 C Sep 4, 2026
i*t*s*r*a*z.net /wp-content/ Unknown F Sep 4, 2026
d*r*e*s*a*e*.com /wp-content/ Unknown F Sep 4, 2026
h*m*a*a*a*i*e.com /wp-content/ 7.1 F Sep 4, 2026