WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| c*i*k*n*o*d*d*s*a*g*r.cl 🔒 | 7.0 | generatepress | F | — | Jun 6, 2026 |
| n*m*d*a*-*a*i*o.com 🔒 | Unknown | astra | F | — | Jun 6, 2026 |
| m*c*s*n*g*.com 🔒 | Unknown | brand-site | F | — | Jun 6, 2026 |
| d*o*s*u*a*.se 🔒 | 6.9 | review-theme | F | — | Jun 6, 2026 |
| c*s*n*-*o*d*r*l*m*e*-*l.org 🔒 | Unknown | brand-site | F | — | Jun 6, 2026 |
| s*n*h*a*u*e.s*k*r*.n*.jp 🔒 | 6.1.10 | themify-ultra | F | — | Jun 6, 2026 |
| p*u*i*s*c*e*.com 🔒 | 5.5.18 | dara | F | — | Jun 6, 2026 |
| e*d*-*c*4*1*5*4*9*.n*e*g*.io 🔒 | Unknown | CP10 | F | — | Jun 6, 2026 |
| a*s*p*c*.fr 🔒 | 7.0 | kadence-child | F | — | Jun 6, 2026 |
| p*c*a.b*o*.t*d*h*n*i*.org 🔒 | 7.0 | simplo | F | — | Jun 6, 2026 |
| b*z*s*e*e*e*b*.de 🔒 | 6.9.4 | Unknown | F | — | Jun 6, 2026 |
| m*i*-*d*k*-*e*b*h*.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*r*i*b*a*t*f*l.c*m.au 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| j*a*v*r*l*g.c*o*.nl 🔒 | Unknown | magazine | D | — | Jun 6, 2026 |
| z*r*e*i*s*e*u*.nl 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| r*p*u*a*l*.fi 🔒 | 6.3.8 | enfold | F | — | Jun 6, 2026 |
| o*a*h*n*-*h*r*.jp 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| n*n*t*m*d*a*l*.com 🔒 | Unknown | salient | F | — | Jun 6, 2026 |
| n*n*t*u*i*c.com 🔒 | 7.0 | ai-training-lp | F | — | Jun 6, 2026 |
| n*n*a*l*v*g*m*4.com 🔒 | Unknown | cocoon-master | F | — | Jun 6, 2026 |
| n*n*i*c*u*e.com 🔒 | Unknown | Lucid | F | — | Jun 6, 2026 |
| n*n*i*o*a*i*e.com 🔒 | 6.9.4 | yith-wonder | F | — | Jun 6, 2026 |
| n*n*i*o*u*l*t*n.com 🔒 | Unknown | 2024-cmg | F | — | Jun 6, 2026 |
| n*n*i*o*o*d*e*k*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| n*n*k*u*g*c*l.com 🔒 | 7.0 | medibazar | F | — | Jun 6, 2026 |
| n*n*m*n*h*.com 🔒 | 6.9 | musico | F | — | Jun 6, 2026 |
| n*n*n*-*l*b.com 🔒 | 7.0 | customify | F | — | Jun 6, 2026 |
| n*n*n*m*3.com 🔒 | 7.0 | sinatra | F | — | Jun 6, 2026 |
| n*n*n*z*k*.com 🔒 | Unknown | promoter | F | — | Jun 6, 2026 |
| n*n*o*g*n*c*.com 🔒 | 7.0 | avanam | D | — | Jun 6, 2026 |
| n*n*p*t*e*.com 🔒 | Unknown | hello-elementor | F | — | Jun 6, 2026 |
| n*n*s*l*e*r*e*h*u*e.com 🔒 | 7.0 | wb4wp-wordpress-theme-production | F | — | Jun 6, 2026 |
| b*o*t*i*-*z*e*i*t*n.org 🔒 | Unknown | boostwin-universal | F | — | Jun 6, 2026 |
| n*p*l*r*y.com 🔒 | 6.9.1 | twentytwentyfive | F | — | Jun 6, 2026 |
| o*t*o*a*d*e*l*b*.de 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| k*n*l*i*l*t*e.de 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| i*s*i*a*i*n*b*r*i*.de 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| p*6*9*0.w*b*p*c*c*n*i*.de 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| s*e*k*d*.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| o*e*n*g*n*y*a*d*v*s.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| c*l*a*1*1*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| i*d*.e*u.uy 🔒 | Unknown | Divi | D | — | Jun 6, 2026 |
| k*s*a*s*n*t.de 🔒 | 7.0 | elevated-lite | F | — | Jun 6, 2026 |
| t*k*a*t.be 🔒 | 6.8.5 | twentyseventeen | F | — | Jun 6, 2026 |
| a*k*.info 🔒 | 7.0 | betheme | F | — | Jun 6, 2026 |
| d*g*e*u.sk 🔒 | Unknown | digiedu | C | — | Jun 6, 2026 |
| i*n*v*w*b*i*e*.com 🔒 | 6.9.4 | digalu-child | F | — | Jun 6, 2026 |
| d*s*g*i*g*o*l*a*n*n*.info | 6.5.3 | total | F | — | Jun 6, 2026 |
| b*t*n*.c*.jp 🔒 | 5.4.2 | bst | F | — | Jun 6, 2026 |
| g*o*e.h*-*a*e.com 🔒 | Unknown | logue_tcd020 | F | — | Jun 6, 2026 |