WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| s*m*l*r*a*r*c*r*s.com | 7.0.2 | generatepress | F | — | Jul 31, 2026 |
| s*m*l*n*w*e*l*n*.com | Unknown | Unknown | F | — | Jul 31, 2026 |
| s*m*l*n*o.com | Unknown | Divi | F | — | Jul 31, 2026 |
| m*d*o*n*p*r*i*a*g*o*p.com | 6.7.5 | westy | F | — | Jul 31, 2026 |
| m*d*o*n*n*i*u*s*e*o.com | Unknown | Avada | F | — | Jul 31, 2026 |
| m*d*o*n*4*1.com | Unknown | Divi | F | — | Jul 31, 2026 |
| f*a*e*u*d*.c*m.au | Unknown | Unknown | F | — | Jul 31, 2026 |
| c*i*i*u*d*n*a*r*a*l*n.be | Unknown | Divi | F | — | Jul 31, 2026 |
| p*y*t*e*u*s*n*.fr | 5.3.4 | Payette2013 | F | — | Jul 31, 2026 |
| l*t*f*h*n*s.paris | 7.0.2 | blossom-shop-pro | F | — | Jul 31, 2026 |
| m*r*n*-*o*t*o*.com | Unknown | vantage | F | — | Jul 31, 2026 |
| m*r*n*a*r*o*r*a*s.com | 7.0.2 | hello-elementor | F | — | Jul 31, 2026 |
| f*a*e*a*d*a*h*o*.com | 7.0.2 | wizestore | F | — | Jul 31, 2026 |
| f*a*e*5*.com | 7.0.2 | twentyseventeen | F | — | Jul 31, 2026 |
| f*a*e*-*e*s*u*c*s.com | 6.8.6 | massive-dynamic | F | — | Jul 31, 2026 |
| f*a*e*-*a*.com | 5.8.13 | windazo | F | — | Jul 31, 2026 |
| f*a*e*-*s*.com | 4.8.25 | koto | F | — | Jul 31, 2026 |
| f*a*e*-*r*u*.com | Unknown | byron | F | — | Jul 31, 2026 |
| f*a*e*-*e*i*n.com | Unknown | frame_design_new | F | — | Jul 31, 2026 |
| f*a*e*t*i*g*.com | Unknown | framerthings | D | — | Jul 31, 2026 |
| f*a*e*s*a*k*t*a*l*r*.com | 7.0.2 | twentyeleven | F | — | Jul 31, 2026 |
| s*m*l*s*c.com | Unknown | bridge | C | — | Jul 31, 2026 |
| s*m*l*s*r*p*r*i*s.com | Unknown | generatepress-child | F | — | Jul 31, 2026 |
| s*m*l*s*f*a*s*u*s.com | 6.4.3 | magways | F | — | Jul 31, 2026 |
| s*m*l*s*z*s*o*.com | 6.8.6 | ufhealth-apollo | C | — | Jul 31, 2026 |
| s*m*l*s*a*d*o*e.com | Unknown | type | F | — | Jul 31, 2026 |
| s*m*l*s*n.com | 6.0.12 | lightning-pro | F | — | Jul 31, 2026 |
| s*m*l*m*a*o*p*b*i*h*n*.com | 7.0.2 | covernews | F | — | Jul 31, 2026 |
| s*m*l*m*g*k.com | Unknown | tomes | F | — | Jul 31, 2026 |
| s*m*l*l*m*e*.com | Unknown | Divi | F | — | Jul 31, 2026 |
| m*d*n*r*b*t*e*p*r*.com | Unknown | Divi | F | — | Jul 31, 2026 |
| m*d*n*u*i*.com | Unknown | agency-pro | F | — | Jul 31, 2026 |
| m*d*n*a*y*r*.com | 7.0.2 | rogers | F | — | Jul 31, 2026 |
| m*d*n*o*s*k*e*i*g.com | 7.0.2 | generatepress | F | — | Jul 31, 2026 |
| m*d*n*o*e*e*m.com | 7.0.2 | twentyseventeen | F | — | Jul 31, 2026 |
| m*d*n*a*q*e*t.com | 7.0.2 | twentyten | F | — | Jul 31, 2026 |
| m*d*n*o*d*r*c*s.com | 7.0.2 | neve | F | — | Jul 31, 2026 |
| m*d*n*o*d*r*c*f*s*.com | 7.0.2 | neve | F | — | Jul 31, 2026 |
| a*t*m*e*e.com | 7.0.2 | semplice7 | F | — | Jul 31, 2026 |
| a*t*m*e*e*t*i*.com | Unknown | theme-hollow | F | — | Jul 31, 2026 |
| a*t*m*d*n*v*n*e*i*n.com | 7.0.2 | headway | F | — | Jul 31, 2026 |
| a*t*m*d*n*a*.com | Unknown | twentytwentyfive | F | — | Jul 31, 2026 |
| a*t*m*c*t*i*.com | 7.0.2 | kadence | F | — | Jul 31, 2026 |
| m*i*h*r*t.c*.uk | 4.9.26 | meinhardt | F | Jul 31, 2026 | |
| m*i*h*r*t.c*m.sg | 5.1.19 | meinhardt | F | Jul 31, 2026 | |
| m*i*h*r*t.c*m.au | 5.1.19 | meinhardt | F | Jul 31, 2026 | |
| 4*e*s*e*m*n*.com | Unknown | Unknown | F | — | Jul 31, 2026 |
| p*i*e*b.ee | 6.7.5 | hestia | F | — | Jul 31, 2026 |
| t*e*e*t*i*k*r*c*u*.com | 7.0.2 | Avada | F | — | Jul 31, 2026 |
| t*e*e*t*e*t*e*r*j*c*.com | Unknown | Divi | F | — | Jul 31, 2026 |