WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| a*r*l*v*a.s*o*e*l*b.ru 🔒 | 7.0 | stone | F | — | Jun 6, 2026 |
| b*l*s*i*a.s*o*e*l*b.ru 🔒 | 7.0 | stone | F | — | Jun 6, 2026 |
| b*o*n*c*.s*o*e*l*b.ru 🔒 | 7.0 | stone | F | — | Jun 6, 2026 |
| v*d*o*.s*o*e*l*b.ru 🔒 | 7.0 | stone | F | — | Jun 6, 2026 |
| 1*1*o*w*t*r.com 🔒 | Unknown | Avada | F | — | Jun 6, 2026 |
| n*c*.n*s*.gov 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| k*k*-*u*o*a*a.com 🔒 | 6.8.5 | welcart_basic | F | — | Jun 6, 2026 |
| y*r*z*w.g*.jp 🔒 | 6.7.5 | xeory_base | D | Jun 6, 2026 | |
| s*t*v*d*o.l*g*d*.fr 🔒 | 6.6.5 | colormag | F | — | Jun 6, 2026 |
| m*d*a.e*g*t*.jp 🔒 | Unknown | Unknown | D | — | Jun 6, 2026 |
| 5*0.c*.nz 🔒 | 6.8.1 | flatsome | F | — | Jun 6, 2026 |
| n*v.m*n*d.com 🔒 | Unknown | WebStack-1 | F | — | Jun 6, 2026 |
| l*f*o*f*r*e*e*t.com 🔒 | Unknown | genesis-child | F | — | Jun 6, 2026 |
| k*f*a*c*i*e.c*.uk 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| c*e*c*t*i*t*r*o*e.a*t*r*i*t*.org 🔒 | 6.9.4 | ashe | F | — | Jun 6, 2026 |
| e*o*a*l*f*.eu 🔒 | Unknown | BBtheme | F | — | Jun 6, 2026 |
| e*.i*s*r*g*n.es 🔒 | Unknown | betheme-child | F | Jun 6, 2026 | |
| m*w*r*s*o*.info 🔒 | 6.8.5 | generatepress | F | — | Jun 6, 2026 |
| s*l*n*a*i*y.eu 🔒 | 7.0 | solor | F | — | Jun 6, 2026 |
| i*d*e*h*0*4.eu 🔒 | 7.0 | j1ky87vzxpan8t5i6hvdd610974 | D | — | Jun 6, 2026 |
| t*a*l*f*k*e*e*.nl 🔒 | 5.5.18 | salient | F | — | Jun 6, 2026 |
| s*i*e*z*.nl 🔒 | Unknown | go-online | F | — | Jun 6, 2026 |
| t*p*p*r*t*a*s*w*l*e.nl 🔒 | 6.8.5 | newsever | F | — | Jun 6, 2026 |
| 1*0*t.nl 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| h*e*z*.nl 🔒 | 7.0 | twentytwentythree | F | — | Jun 6, 2026 |
| b*l*o*e.be 🔒 | Unknown | blocksy | C | — | Jun 6, 2026 |
| n*j*c*m*o*n*.com 🔒 | 6.9.4 | twentytwentyfour | F | — | Jun 6, 2026 |
| n*j*i*f*s*r*i*e.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| n*j*h*o*t*a*t*n*.com 🔒 | 6.9.4 | hello-elementor | F | — | Jun 6, 2026 |
| n*j*f*a*d*a*e.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| n*j*a*e*t*r*r*s*s.com | 7.0 | astra | D | — | Jun 6, 2026 |
| n*i*e*.com 🔒 | 6.5.2 | hello-elementor | F | — | Jun 6, 2026 |
| n*i*i*a*.com 🔒 | 6.9.4 | generatepress | F | — | Jun 6, 2026 |
| n*i*e*d*.com 🔒 | Unknown | naitendi-child | F | — | Jun 6, 2026 |
| n*i*s*n*-*y*.com 🔒 | 6.8.2 | fun-planet-fse | F | — | Jun 6, 2026 |
| n*i*s*n*e*-*i*t*s.com 🔒 | 7.0 | bwa | F | — | Jun 6, 2026 |
| n*i*o*g*k*n.com 🔒 | Unknown | nano_tcd065 | F | — | Jun 6, 2026 |
| n*i*o*i*n*e*g*o*n*.com 🔒 | 6.9.4 | zeever | F | — | Jun 6, 2026 |
| n*i*o*i*a*i*n*l*a*k*a*a*i*.com 🔒 | 4.9.22 | theme | F | — | Jun 6, 2026 |
| n*i*o*i*r*d*e*l*n*c.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| n*i*o*i*n*c*i*i*.com 🔒 | 6.8.2 | medcity | F | — | Jun 6, 2026 |
| m*t*f*n*n*e.de 🔒 | Unknown | Divi | D | — | Jun 6, 2026 |
| h*a*t*y*a*i*y*r*k.d*y*d*t*.com 🔒 | 7.0 | customizr | F | — | Jun 6, 2026 |
| i*t*e*o*p.e*g*n*e*i*g.a*u.edu 🔒 | Unknown | pitchfork | D | — | Jun 6, 2026 |
| p*a*i*u*g*i*d.com 🔒 | 6.9.1 | flatsome | F | — | Jun 6, 2026 |
| p*b*-*p*r*.de 🔒 | 6.9.4 | sceneone | F | — | Jun 6, 2026 |
| l*a*n.g*o*n*s*u*i*.eu 🔒 | 7.0 | colormag | F | — | Jun 6, 2026 |
| h*l*i*j*n*s.de 🔒 | 6.9.1 | twentytwentyfive | F | — | Jun 6, 2026 |
| m*o*n*l*c*t.de 🔒 | 7.0 | harrison | F | — | Jun 6, 2026 |
| m*d*a*i*n*g*p*.de 🔒 | 6.6.5 | twentyfifteen | F | — | Jun 6, 2026 |