WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| f*u*n*e*g*i*h*a*g*a*e*c*o*l.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| f*u*n*e*e*t*i*a*.com 🔒 | Unknown | astra | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*r*a*b*r*n*.com 🔒 | 6.9.5 | cohn_theme | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*m*i*i*g*i*t.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*l*w*v.com 🔒 | 7.0.2 | StateLawTV | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*j*c*a*d*o*e.com 🔒 | 6.7.5 | cohn_theme | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*g*l*.com 🔒 | 7.0.2 | auberge | F | — | Jul 28, 2026 |
| n*w*a*p*h*r*f*a*f*e*l*.com 🔒 | 6.8.6 | modern-studio-pro | F | — | Jul 28, 2026 |
| a*i*b*.com 🔒 | 7.0.2 | kingtube | D | — | Jul 28, 2026 |
| t*r*l*t*b*e*a*e*.c*.uk 🔒 | 7.0.2 | responsive | F | — | Jul 28, 2026 |
| c*s*c.org 🔒 | 7.0.2 | oceanwp | F | — | Jul 28, 2026 |
| c*m*u*e*p*o.me 🔒 | 6.9.4 | yoo_infinite_wp | F | — | Jul 28, 2026 |
| a*o*i*a.org 🔒 | 6.9.5 | twentyten | F | — | Jul 28, 2026 |
| c*a*i*y.cx 🔒 | 7.0.2 | bricks | F | — | Jul 28, 2026 |
| b*d*s.sk 🔒 | Unknown | budis | F | — | Jul 28, 2026 |
| r*u*s.net 🔒 | 6.0.12 | hello-elementor | F | — | Jul 28, 2026 |
| c*e*o*t*e*t*a*n.org 🔒 | 6.9.4 | hello-biz | F | — | Jul 28, 2026 |
| j*b*l*e*a*k.in 🔒 | Unknown | hb_salute | F | — | Jul 28, 2026 |
| t*e*a*a*a*r*o*.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| g*t*s*.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| l*r*s*t*f*e*h*a*k*t.com 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| l*r*s*t*d*c*r*o.com 🔒 | 7.0.2 | oceanwp | F | — | Jul 28, 2026 |
| l*r*s*t*d*l*s*i*n*o*.com 🔒 | 6.1.10 | noah-lite | F | — | Jul 28, 2026 |
| l*r*s*b*a*t*.com 🔒 | 7.0.2 | bridge | F | — | Jul 28, 2026 |
| l*r*s*a*a*p*m*n*o*h.com 🔒 | 6.1.7 | themify-ultra | F | — | Jul 28, 2026 |
| l*r*s*v*s*o*.com 🔒 | 7.0.2 | Avada | F | — | Jul 28, 2026 |
| l*r*s*t*c*e*t*v*.com 🔒 | 7.0.2 | astra | D | — | Jul 28, 2026 |
| a*e*i*r*u*r.com 🔒 | Unknown | hestia | F | — | Jul 28, 2026 |
| a*e*i*r*t*.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| a*e*i*r*r*w.com 🔒 | 6.9.5 | wp_theme | F | — | Jul 28, 2026 |
| a*e*i*r*r*a*i*e*e*i*.com 🔒 | Unknown | Nimble | F | — | Jul 28, 2026 |
| a*e*i*r*r*a*e*r*.com 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| a*e*i*r*r*a*n*c*.com 🔒 | 6.2.9 | engic | F | — | Jul 28, 2026 |
| v*v*e*d*r*.com 🔒 | 6.8.6 | parament | F | — | Jul 28, 2026 |
| v*v*e*e*t*i*j*t*.com 🔒 | 7.0.2 | twentytwentythree | F | — | Jul 28, 2026 |
| v*v*e*c*m*i*g.com 🔒 | 7.0.2 | generatepress | F | — | Jul 28, 2026 |
| a*e*i*r*o*l*u*s*o*u*.com 🔒 | 7.0.2 | phlox-pro | F | — | Jul 28, 2026 |
| a*e*i*r*o*.com 🔒 | Unknown | ateliercos | F | — | Jul 28, 2026 |
| a*e*i*r*o*u*l*e*l*u*.com 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| j*n*s*l*.c*.uk 🔒 | 7.0.2 | storefront | F | — | Jul 28, 2026 |
| t*e*a*a*o*a*e*.com 🔒 | 6.9.5 | photoblogster | F | — | Jul 28, 2026 |
| t*e*a*a*i*e*.com 🔒 | 7.0.2 | bloglo | F | — | Jul 28, 2026 |
| t*e*a*a*l*u*h.com 🔒 | 6.8.6 | activello | F | — | Jul 28, 2026 |
| o*e*m*n*e*r*a*i*m.com 🔒 | 7.0.2 | twentysixteen | F | — | Jul 28, 2026 |
| t*e*a*a*e*o*t*r.com 🔒 | 7.0.2 | responsiveblogily | F | — | Jul 28, 2026 |
| t*e*a*a*i*.com 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| t*e*a*e*p*r*c*m*a*i*s.com 🔒 | 7.0.2 | houzez | F | — | Jul 28, 2026 |
| t*e*a*e*a*y*n.com 🔒 | Unknown | Divi | B | — | Jul 28, 2026 |
| t*e*a*e*a*.com 🔒 | 7.0.2 | signify | F | — | Jul 28, 2026 |
| t*e*a*i*g*a*i*g.com 🔒 | 7.0.2 | blankslate | F | — | Jul 28, 2026 |