WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| b*d*a*p*c*s.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*d*a*k*.com 🔒 | 7.0 | twentyseventeen | F | — | Jun 6, 2026 |
| b*d*a*u*o*a*q*i*e*t*r*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| b*d*a*h*t*l.com 🔒 | 5.2.21 | sohohotel | F | — | Jun 6, 2026 |
| b*d*a*l*a*s.com 🔒 | 6.1.10 | badiaalfacs | F | — | Jun 6, 2026 |
| b*d*u*t*n*s*o*e.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| b*d*u*t*n*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| b*d*o*b*e*b*n*.com 🔒 | 7.0 | popularfx | F | — | Jun 6, 2026 |
| b*d*o*b*e*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| m*r*s*u*y*a*m.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| g*e*s*h*l*n*n*r*i*.nl 🔒 | 6.1.1 | GSE-theme | F | — | Jun 6, 2026 |
| j*n*t*s*i*e*t.com 🔒 | Unknown | generatepress | F | — | Jun 6, 2026 |
| h*.m*t*l*p*o*o*y*i*g.com 🔒 | Unknown | tianyijingmi-AB094-hi | F | — | Jun 6, 2026 |
| v*v*m*z*m*t*a.c*m.mx 🔒 | Unknown | flatsome | C | — | Jun 6, 2026 |
| m*s*p*o*o*i*t*a*.com 🔒 | 7.0 | flatsome | F | — | Jun 6, 2026 |
| m*d*a*t*a*d.site 🔒 | 7.0 | colormag | F | — | Jun 6, 2026 |
| t*a*e*2*2*.r*.com | 6.9 | flatsome | F | — | Jun 6, 2026 |
| n*n*m*.com 🔒 | 6.9.4 | bosa | F | — | Jun 6, 2026 |
| n*n*n*d*e.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| n*n*u*k*t*o*f*a*t*e*t*l.com 🔒 | 7.0 | vantage | F | — | Jun 6, 2026 |
| n*n*e*g*i.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| n*n*i*.com 🔒 | 7.0 | musart | F | — | Jun 6, 2026 |
| n*n*a*a*a*a*i*s.com 🔒 | Unknown | bb-theme | F | — | Jun 6, 2026 |
| n*n*a*a*a*o*n*a*n*s*a*e.com 🔒 | 6.8.5 | bellevuex-child | F | — | Jun 6, 2026 |
| h*g*s*.o*g.za 🔒 | Unknown | billio | D | — | Jun 6, 2026 |
| 8*u*e*.download 🔒 | 6.6.1 | pixgraphy | F | — | Jun 6, 2026 |
| f*a*y*o*.cn 🔒 | Unknown | custom-app | B | — | Jun 6, 2026 |
| v*h*p*o*e*t.eu 🔒 | 6.9.4 | vhh | F | — | Jun 6, 2026 |
| p*e*r*d.e*c*l*v*s*o*.eu 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| f*h*n*p*l.o*g.np 🔒 | 7.0 | fwch | F | — | Jun 6, 2026 |
| w*b.n*o*n*u*e*.c*m.vn 🔒 | Unknown | hello-elementor | F | — | Jun 6, 2026 |
| p*d*a*r*y*-*p*.ru 🔒 | Unknown | souz-pediatrov | F | — | Jun 6, 2026 |
| h*y*e*l*s*r*a*r.c*.uk 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| n*o*.c*.zm 🔒 | 6.9.4 | neon | F | — | Jun 6, 2026 |
| i*a*i*w*.d*m*a*g*w*b.com 🔒 | Unknown | EduTheme | D | — | Jun 6, 2026 |
| s*i*n*e*f*o*l*.e*e*e*t*r.cloud 🔒 | 6.8.5 | hello-elementor | F | — | Jun 6, 2026 |
| f*t*a*1*8.com 🔒 | 7.0 | batik88 | D | — | Jun 6, 2026 |
| k*r*n*r*h*p.c*.il 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| l*x*e*e*o*u*i*n.c*.th 🔒 | 7.0 | wp-bootstrap-4 | F | — | Jun 6, 2026 |
| s*l*r*e*u*a*i*n.de | 6.4.2 | vantage | F | — | Jun 6, 2026 |
| b*l*o*s*l*r*i*l.de 🔒 | 6.9.4 | aries | F | — | Jun 6, 2026 |
| w*s*h*u*e*e*-*e*a*t*r*n*-*e*h*r*.de 🔒 | 7.0 | hueman | F | — | Jun 6, 2026 |
| o*e*i*d*.de 🔒 | 7.0 | weta | F | — | Jun 6, 2026 |
| f*s*l*t*a*s*o*t*.de 🔒 | 6.9.4 | socialme-fisel | F | — | Jun 6, 2026 |
| t*n*i*-*o*c*s*a*d*.de 🔒 | 6.1.1 | astra | F | — | Jun 6, 2026 |
| s*h*i*m*n.s*v*h*e*h*t*e*t.de 🔒 | 7.0 | sydney | F | — | Jun 6, 2026 |
| g*t*r*r*f*.de 🔒 | 6.7.5 | twentytwenty | F | — | Jun 6, 2026 |
| f*e*l*c*t*u*h*e*v*l*e*b*c*.de 🔒 | 6.9.4 | theater_villenbach | F | — | Jun 6, 2026 |
| f*l*n*w*i*.de 🔒 | 7.0 | blocksy | F | — | Jun 6, 2026 |
| a*-*i*d*n*.org 🔒 | 7.0 | neve | F | — | Jun 6, 2026 |