WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| i*b*w*r*u*g*n.de 🔒 | 7.0 | extendable | F | — | Jun 7, 2026 |
| b*o*.e*t*r*e*w*r*s.com 🔒 | 7.0 | blog-2020 | F | — | Jun 7, 2026 |
| p*e*i*s*2.com 🔒 | 6.9.4 | oceanwp | F | — | Jun 7, 2026 |
| e*t*x.com 🔒 | 6.9 | extex_v2 | F | — | Jun 7, 2026 |
| b*g*i*p*l*j*e*o*m*n*c*t*e.nl 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| f*e*f*n*-*u*d*o*s*e*n.de 🔒 | 7.0 | donovan | D | — | Jun 7, 2026 |
| m*r*-*-*e*s*n*.ch 🔒 | 6.8.3 | ollie | F | — | Jun 7, 2026 |
| h*e*m*t*g*i*e*.dk 🔒 | 7.0 | travel-master-fse | F | — | Jun 7, 2026 |
| b*l*g*a*i*i*.dk 🔒 | 7.0 | fresh-blog-lite | F | — | Jun 7, 2026 |
| p*n*e*a*e*.dk 🔒 | 7.0 | gutentools-food-blog | F | — | Jun 7, 2026 |
| r*j*e*o*h*e*d*g.dk 🔒 | 7.0 | blockskit-base | F | — | Jun 7, 2026 |
| h*e*o*m*d.dk 🔒 | 7.0 | aria-fse | F | — | Jun 7, 2026 |
| s*i*o*s*a*.dk 🔒 | 7.0 | stillness | F | — | Jun 7, 2026 |
| o*g*n*s*r*i*h*e*.dk 🔒 | 7.0 | blockskit-base | F | — | Jun 7, 2026 |
| i*d*e*d*t*j*m.dk 🔒 | 7.0 | blockskit-base | F | — | Jun 7, 2026 |
| c*k*l*u*p*.dk 🔒 | Unknown | pilanto | F | — | Jun 7, 2026 |
| j*l*v*s*.dk 🔒 | Unknown | pilanto | F | — | Jun 7, 2026 |
| m*c*o*o*r*s.o*g.au 🔒 | 7.0 | reykjavik | F | — | Jun 7, 2026 |
| a*o*a*c.nl 🔒 | 6.7.5 | rwweb-alohaoc | F | — | Jun 7, 2026 |
| v*s*t*a*.nl 🔒 | 7.0 | storefront | F | — | Jun 7, 2026 |
| l*b*u.dk 🔒 | 7.0 | creative-minimalist | F | — | Jun 7, 2026 |
| b*l*g*g*o*e.dk 🔒 | 7.0 | fse-empire | F | — | Jun 7, 2026 |
| h*e*m*h*s*i*.dk 🔒 | 7.0 | zamkai-fse | F | — | Jun 7, 2026 |
| b*l*g*n*r*t*i*g*g*i*e*.dk 🔒 | 7.0 | lifestyle-blog-arcane | F | — | Jun 7, 2026 |
| p*p*a*o*z.eu 🔒 | 5.0.25 | pad2_10_01 | F | — | Jun 7, 2026 |
| b*p*.d*s*i*.c*m.pl 🔒 | 6.9.4 | online-shop | F | — | Jun 7, 2026 |
| a*t*o*s*k*l*w*.pl 🔒 | Unknown | arthousenew | F | — | Jun 7, 2026 |
| a*e*i*r*a*e*l*v*r*e.fr 🔒 | 7.0 | photoline-lite | F | — | Jun 7, 2026 |
| j*o*u*a*.jp 🔒 | Unknown | jin | F | — | Jun 7, 2026 |
| a*v*c*c*a*i*.c*m.vc 🔒 | Unknown | flatsome | C | — | Jun 7, 2026 |
| n*t*e*v*c*s*r*u*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*t*f*.com 🔒 | Unknown | WPPOP | F | — | Jun 7, 2026 |
| n*t*h*p*h*l*j.com 🔒 | 7.0 | woodmart-child | F | — | Jun 7, 2026 |
| n*t*k*m*.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| n*t*k*g*o*p.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| n*t*m*r*z*r*u*.com 🔒 | 6.8.2 | netsmartzgroup | A | — | Jun 7, 2026 |
| n*t*o*u*i*n*v*n*c*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*t*p*e*e*e*i*.com 🔒 | 6.9.4 | ryse | F | — | Jun 7, 2026 |
| n*t*s*k*l*g.com 🔒 | 7.0 | the-schema | F | — | Jun 7, 2026 |
| n*t*a*l*s*.com 🔒 | 7.0 | khabarpatrika | F | — | Jun 7, 2026 |
| n*t*a*t*d*o*.com 🔒 | 7.0 | twentytwentyfour | D | — | Jun 7, 2026 |
| n*t*a*a*h*r*s*r*.com 🔒 | Unknown | Divi | B | — | Jun 7, 2026 |
| n*t*e*c*e*r*a*i*a*i*n.com 🔒 | 7.0 | ashe-pro-premium | F | — | Jun 7, 2026 |
| n*t*o*k*0*.com 🔒 | 7.0 | netrock101 | F | — | Jun 7, 2026 |
| n*t*a*v.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*t*e*r.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*t*e*t*.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| a*u*h*a*a*h*o*d.c*.uk 🔒 | 6.9.4 | twentytwenty | F | — | Jun 7, 2026 |
| b*o*k*e*n.com 🔒 | 6.2.8 | flixita | F | — | Jun 7, 2026 |
| c*r*l*n*f*i*o*.world 🔒 | 7.0 | oceanwp | F | — | Jun 7, 2026 |