WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| n*t*o*a*c*o*c*c*e*n*n*s*r*i*e*.com 🔒 | 6.9.4 | Avada | F | — | Jun 6, 2026 |
| n*t*o*a*c*v*l*r*c*s*.com 🔒 | Unknown | x | F | — | Jun 6, 2026 |
| n*t*o*a*d*w*h*o*v*n*i*n.com 🔒 | Unknown | exhibz | F | — | Jun 6, 2026 |
| n*t*o*a*d*b*d*f*n*e.com 🔒 | 6.9.4 | zerif-lite | F | — | Jun 6, 2026 |
| n*t*o*a*a*t*s*l*t*o*s*t*.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| b*g*z*w*a*i*i.com 🔒 | 6.7.5 | bizberg | F | — | Jun 6, 2026 |
| b*g*t*e*v*s.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*g*t*l*e*a*e*y.com 🔒 | 7.0 | bricks | F | — | Jun 6, 2026 |
| b*g*t*l*e.com 🔒 | Unknown | Unknown | D | — | Jun 6, 2026 |
| b*g*t*l*e*r*s*r*.com 🔒 | 6.8.5 | hello-elementor | F | — | Jun 6, 2026 |
| b*g*s*l*t.com 🔒 | 7.0 | maxwin88 | D | — | Jun 6, 2026 |
| b*g*s*g*o*p.com 🔒 | 6.9.4 | ambition | F | — | Jun 6, 2026 |
| b*g*s*3.com 🔒 | 7.0 | slotmacau188 | F | — | Jun 6, 2026 |
| b*g*s*2*.com 🔒 | 7.0 | slotmacau188 | F | — | Jun 6, 2026 |
| b*g*s*-*.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| k*w*.car 🔒 | 5.6.17 | kowa | F | — | Jun 6, 2026 |
| a*e*d*.e*.com 🔒 | 6.9.4 | flatsome | F | — | Jun 6, 2026 |
| k*e*i*.e*.com 🔒 | 7.0 | flatsome | F | — | Jun 6, 2026 |
| a*o*8*f.live 🔒 | 6.6.2 | flatsome | C | — | Jun 6, 2026 |
| l*o*i*i*l.i*.net 🔒 | 7.0 | flatsome | F | — | Jun 6, 2026 |
| h*a*.com | Unknown | corporate_tcd011 | F | — | Jun 6, 2026 |
| e*w*b*i*e.org 🔒 | Unknown | swell | F | — | Jun 6, 2026 |
| s*d*z*s.net 🔒 | Unknown | cocoon-master | F | — | Jun 6, 2026 |
| r*v*r*i*l.jp 🔒 | Unknown | riverhill2020 | F | Jun 6, 2026 | |
| d*n*a*r*s*.ro 🔒 | 7.0 | rishi-child | F | — | Jun 6, 2026 |
| k*m*r*s*c.c*.jp 🔒 | 6.6.5 | Unknown | F | — | Jun 6, 2026 |
| i*.s*e.o*.jp 🔒 | Unknown | staffTemplate | D | — | Jun 6, 2026 |
| f*c*i*v*s*m*n*.biz 🔒 | 7.0 | diver | F | — | Jun 6, 2026 |
| k*b*-*a*c*i*g.com 🔒 | 7.0 | x-t9 | F | — | Jun 6, 2026 |
| o*l*n*-*o*n*e*i*g.n*f*a*e.com 🔒 | Unknown | affinger5 | F | — | Jun 6, 2026 |
| r*k*k*-*u*c*m*n*.de 🔒 | 7.0 | Avada | F | — | Jun 6, 2026 |
| m*i*f*o*l*i*.de 🔒 | Unknown | picostrap5-child-base | F | — | Jun 6, 2026 |
| b*e*a*n*p*c*.fr 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| t*b*e*t*a*u*e.fr 🔒 | 6.7.2 | Unknown | F | — | Jun 6, 2026 |
| t*x*i*e*v*l*e*.fr 🔒 | 6.9.4 | mediapilote | F | — | Jun 6, 2026 |
| d*m*s.b*v*t*s*n.com 🔒 | 6.9.4 | arcade | F | — | Jun 6, 2026 |
| n*r*o*k*r*s*w*r*s.org 🔒 | Unknown | h4 | F | — | Jun 6, 2026 |
| y*w*m*r*e*i*g.c*.uk 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| n*o*a*s.nl 🔒 | Unknown | flatsome | C | — | Jun 6, 2026 |
| f*n*a*o*u*f.i*m*b.es 🔒 | Unknown | yootheme | D | — | Jun 6, 2026 |
| g*a*-*v.ru 🔒 | 7.0 | gran-dv | F | — | Jun 6, 2026 |
| h*m*l*s*r*i*.ru 🔒 | 6.9.4 | colormag | D | — | Jun 6, 2026 |
| h*a*p*n*e*e*m*n.c*r*o*.ru 🔒 | Unknown | misty-lake | F | — | Jun 6, 2026 |
| p*s*i*l*.in 🔒 | 6.8.5 | flatsome | F | — | Jun 6, 2026 |
| r*c*y*s*i*i*s*n.pl 🔒 | 6.4.8 | ris | F | — | Jun 6, 2026 |
| o*s*i*e*.net 🔒 | 7.0 | Unknown | F | — | Jun 6, 2026 |
| v*c*o*d.vn 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| t*c*o*d*n*e*o*n*a*i*n.org 🔒 | 6.7.4 | hestia | F | — | Jun 6, 2026 |
| c*r*m*c*a*c*a*i*g.in 🔒 | 6.9.4 | di-business | F | — | Jun 6, 2026 |
| b*g*e*.b*c*n.net 🔒 | 7.0 | Unknown | F | — | Jun 6, 2026 |