WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| d*m*n*q*e*r*a*k.de 🔒 | 6.9 | fukasawa | F | — | Jun 7, 2026 |
| v*r*n*s*o*.de | 6.2.9 | Avada | F | — | Jun 7, 2026 |
| r*s.as 🔒 | 6.9.4 | Impreza-child | F | — | Jun 7, 2026 |
| a*g*o.no 🔒 | Unknown | Divi | D | — | Jun 7, 2026 |
| w*p*.b*u*l*b*t*r*e*.c*.uk 🔒 | 6.8.5 | wips | F | — | Jun 7, 2026 |
| s*k*r*-*p*.de 🔒 | 7.0 | salient | F | — | Jun 7, 2026 |
| a*c*t*a*e*-*o*s*l*i*g.de 🔒 | 6.8.2 | oceanwp | F | — | Jun 7, 2026 |
| e*-*i*n*s*.c*.uk 🔒 | 6.9.4 | elf-theme-new | F | — | Jun 7, 2026 |
| m*n*h*h*a*t*s*r*i*e*.c*.uk 🔒 | 7.0 | kadence | F | — | Jun 7, 2026 |
| v*-*l*e.com 🔒 | 7.0 | plover | F | — | Jun 7, 2026 |
| l*m*n*k*d*m*a.hu 🔒 | 7.0 | droow-child | F | — | Jun 7, 2026 |
| r*s*l*r.hu 🔒 | Unknown | enfold | A | — | Jun 7, 2026 |
| k*m*r*s*l*x.hu 🔒 | 6.8.5 | astra | F | — | Jun 7, 2026 |
| b*o*a*k*r*i*e*u*m*t.hu 🔒 | 7.0 | hello-elementor | D | — | Jun 7, 2026 |
| e*e*z*e*e*e*b*u*k*h*l*e*e*t.hu 🔒 | 7.0 | bricks | F | — | Jun 7, 2026 |
| s*e*.tw 🔒 | Unknown | ann | D | — | Jun 7, 2026 |
| e*e*r*i*g.t*e*w*h*-*h*c*.de 🔒 | Unknown | dlq-elearning | F | — | Jun 7, 2026 |
| t*e*s*h*t*-*i*r.de 🔒 | 7.0 | startup-blog | F | — | Jun 7, 2026 |
| t*q*a.hu 🔒 | Unknown | nifty | F | — | Jun 7, 2026 |
| l*a*.b*e.hu 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| r*m*l*7.c*m.br 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| b*r*a*t*.digital 🔒 | Unknown | berrante23 | F | — | Jun 7, 2026 |
| b*.c*o*.br | 7.0 | astra | F | — | Jun 7, 2026 |
| s*k*k*.m*i*.jp 🔒 | Unknown | swell | F | — | Jun 7, 2026 |
| b*a*k*t*e*t*r*s*.c*m.au 🔒 | 6.7.5 | twentytwentythree | F | — | Jun 7, 2026 |
| g*t*w*b.pl 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| s*e*t*e*r*p*r*y.c*m.au 🔒 | 7.0 | salient | B | — | Jun 7, 2026 |
| k*r*e*a.n*t*o.pl 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| a*b*i*.org 🔒 | 7.0 | asbtia | F | — | Jun 7, 2026 |
| r*s*l*e*c*a*j*s*i*i*.s*l*d*r*d*d*n*a*u*i*.org 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| m*t*v*t*r*n*o*p*s*.de 🔒 | 7.0 | heartbeat | F | — | Jun 7, 2026 |
| s*o*.c*a*r*c*n*.com 🔒 | 6.9.4 | aurum | D | — | Jun 7, 2026 |
| a*t*h*o*t*k*n*u*e*.fi 🔒 | 6.3.8 | autohuolto | F | — | Jun 7, 2026 |
| 3*o*m*l*s.com | Unknown | 3formulas | F | — | Jun 7, 2026 |
| t*c*.p*l*t*s*r*u*.com 🔒 | 7.0 | politis-technologies | F | — | Jun 7, 2026 |
| b*p*e*u*t*n*n*.p*k*t*t.ru 🔒 | 7.0 | blacksilver | F | — | Jun 7, 2026 |
| n*u*t*c*.com | 6.9.4 | ohio | F | — | Jun 7, 2026 |
| n*u*e*s*e*t*v*.com 🔒 | 7.0 | business-identity-mvp | F | — | Jun 7, 2026 |
| n*u*a*s*n*e.com 🔒 | 6.9 | extendable | F | — | Jun 7, 2026 |
| n*u*h*s*.com 🔒 | 7.0 | blocksy | F | — | Jun 7, 2026 |
| n*u*s*k*n*t*o*u*.com 🔒 | 6.8.5 | hello-elementor | F | — | Jun 7, 2026 |
| n*u*s*o*n*e*i*n.com 🔒 | 7.0 | bonanza | F | — | Jun 7, 2026 |
| n*u*i*f*s*o*e*a*i*.com 🔒 | 4.9.26 | Avadalbx | F | — | Jun 7, 2026 |
| n*u*c*n*.com 🔒 | 7.0 | generatepress | F | — | Jun 7, 2026 |
| n*u*a*n*a*t*i*b*t*c*n*k.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*u*a*i*o*b*e*l*c*r.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*u*a*i*o*l*u*i*n.com 🔒 | 6.8.5 | Unknown | F | — | Jun 7, 2026 |
| n*u*a*i*o*s*n*o*.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 7, 2026 |
| n*u*a*i*o*y*e*i*a*o*.com 🔒 | Unknown | hardwork | F | — | Jun 7, 2026 |
| e*w.u*.net 🔒 | Unknown | flatsome | C | — | Jun 7, 2026 |