WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| g*o*v*e*g*.com 🔒 | 7.0.2 | twentyseventeen | F | — | Jul 28, 2026 |
| g*o*v*e*u.com 🔒 | 6.9.4 | ashe | F | — | Jul 28, 2026 |
| g*o*v*c*o*k*i*e*.com 🔒 | 7.0.2 | twentytwentytwo | F | — | Jul 28, 2026 |
| g*o*v*c*l*r*n*.com 🔒 | 7.0.2 | blanka-wp | A | — | Jul 28, 2026 |
| g*o*v*c*l*e*t*v*n*.com 🔒 | Unknown | hello-elementor | F | — | Jul 28, 2026 |
| g*o*v*c*d*.com 🔒 | Unknown | astra | F | — | Jul 28, 2026 |
| g*o*v*b*n*s*e*t*r*s.com 🔒 | Unknown | Unknown | F | — | Jul 28, 2026 |
| g*o*v*b*n*s*n*e*t*i*m*n*.com 🔒 | Unknown | Unknown | F | — | Jul 28, 2026 |
| g*o*v*b*o*m*.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| g*o*v*b*b*s*k*.com 🔒 | 7.0.2 | babushka | F | — | Jul 28, 2026 |
| g*o*v*a*r*.com 🔒 | 7.0.2 | sydney | F | — | Jul 28, 2026 |
| g*o*v*5*.com 🔒 | Unknown | cocoon-master | F | — | Jul 28, 2026 |
| g*o*v*2*0*.com 🔒 | 7.0.2 | lightning | F | — | Jul 28, 2026 |
| g*o*v*-*i*e*.com 🔒 | 7.0.2 | groovy | F | — | Jul 28, 2026 |
| g*o*v*-*a*c*l.com 🔒 | Unknown | varia | D | — | Jul 28, 2026 |
| g*o*v*-*.com 🔒 | 7.0.2 | groovy | F | — | Jul 28, 2026 |
| g*o*v*-*u*k*o.com 🔒 | 7.0.2 | Mucklo | F | — | Jul 28, 2026 |
| g*o*v*-*a*i*e.com 🔒 | 7.0.2 | lightning | F | — | Jul 28, 2026 |
| g*o*v*-*o*.com 🔒 | 6.9.4 | Betheme | F | — | Jul 28, 2026 |
| g*o*v*-*u*t*r.com 🔒 | Unknown | the-thor | F | — | Jul 28, 2026 |
| g*o*v*-*a*d*.com 🔒 | 6.4.8 | savoy | F | — | Jul 28, 2026 |
| v*v*e*u*d*r.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| a*e*i*r*o*f*u*n*e.com 🔒 | 6.9.5 | lay | F | — | Jul 28, 2026 |
| v*v*d*g*t*l*g*r*.com 🔒 | Unknown | Unknown | F | — | Jul 28, 2026 |
| v*v*d*f*r*n*e.com 🔒 | 7.0.2 | writee | F | — | Jul 28, 2026 |
| v*v*d*i*e*a*.com 🔒 | 7.0.2 | writee | F | — | Jul 28, 2026 |
| p*e*m*.com 🔒 | Unknown | hello-elementor | F | — | Jul 28, 2026 |
| p*e*y*u*b*o*s.com 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| a*e*i*r*o*p*s*e*l*.com 🔒 | 7.0.2 | atelier-compostelle | F | — | Jul 28, 2026 |
| a*e*i*r*o*n*n.com 🔒 | 7.0.2 | hello-elementor | D | — | Jul 28, 2026 |
| a*e*i*r*o*a*t.com 🔒 | 6.6.5 | storefront | D | — | Jul 28, 2026 |
| t*u*i*e*i*v*s*m*n*.com 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| t*u*i*e*s*l*n.com 🔒 | 7.0.2 | Avada | F | — | Jul 28, 2026 |
| t*u*a*l*c*l*0*8.com 🔒 | 6.4.8 | frontier | B | — | Jul 28, 2026 |
| t*u*.com 🔒 | 7.0 | astra | F | — | Jul 28, 2026 |
| t*t*x*d*.com 🔒 | 7.0.2 | inspiro | F | — | Jul 28, 2026 |
| t*t*r*e*c*a*s*c.com 🔒 | 7.0.2 | hello-elementor | C | — | Jul 28, 2026 |
| t*t*o*.com 🔒 | Unknown | empowerwp | F | — | Jul 28, 2026 |
| t*t*i*e*l*c.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| m*n*y*o*r*.com 🔒 | 6.8.6 | sassico | F | — | Jul 28, 2026 |
| m*n*y*o*e*a*.com 🔒 | 6.7.5 | jupiterx | F | — | Jul 28, 2026 |
| m*n*y*o*t*x*.com 🔒 | Unknown | the-thor | F | — | Jul 28, 2026 |
| m*n*y*o*s*l.com 🔒 | Unknown | swell | F | — | Jul 28, 2026 |
| m*n*y*o*f*r*n*e.com 🔒 | 6.7.5 | storefront | F | — | Jul 28, 2026 |
| m*n*y*o*c*p*s.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| m*n*y*o*p*s*-*i*e.com 🔒 | Unknown | the-thor | F | — | Jul 28, 2026 |
| m*n*y*l*b*e*u*o*.com | 7.0.2 | yith-wonder | F | — | Jul 28, 2026 |
| m*n*y*l*b*i*g.com 🔒 | 7.0 | costaventures-theme-1 | F | — | Jul 28, 2026 |
| a*a*h*m*g.com 🔒 | Unknown | latter-theme | F | — | Jul 28, 2026 |
| c*n*r*l*h*l*s*l*n*r*e*y*j.com 🔒 | Unknown | hello-elementor | F | — | Jul 28, 2026 |