WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| b*g*o*o*p*o*o*i*n*.com 🔒 | 7.0 | papanek | F | — | Jun 7, 2026 |
| b*g*o*o*p*o*o.com 🔒 | 7.0 | papanek | F | — | Jun 7, 2026 |
| b*g*o*e*t*r*a*n*e*t.com 🔒 | 6.7.2 | twentytwentyfive | F | — | Jun 7, 2026 |
| b*g*o*c*n*t*u*t*o*.com 🔒 | Unknown | Total | F | — | Jun 7, 2026 |
| b*g*o*d*x*r*s*.com 🔒 | 7.0 | yith-wonder | F | — | Jun 7, 2026 |
| b*g*j*.com 🔒 | Unknown | enfold | F | — | Jun 7, 2026 |
| b*g*i*e*s*l*t*o*s.com 🔒 | 7.0 | neve | F | — | Jun 7, 2026 |
| b*g*i*e*r*b*e*.com 🔒 | Unknown | bigriverrubber_BRRG_v01 | F | — | Jun 7, 2026 |
| p*e*s.cz 🔒 | 5.5.18 | sydney | F | — | Jun 7, 2026 |
| p*r*i*o*a*k*l*.cz 🔒 | 7.0 | thrive-theme | D | — | Jun 7, 2026 |
| b*r*a*.e*w*b.cz 🔒 | 5.3.21 | amadeus | F | — | Jun 7, 2026 |
| p*i*i*l*i*e*d.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| c*s*a*r*m*n*l*g*e.cz 🔒 | 7.0 | oceanwp | F | — | Jun 7, 2026 |
| b*t*k*a*p.pk 🔒 | 7.0 | kadence | F | — | Jun 7, 2026 |
| a*t*a*c*i*n.com 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| w*w*.i*t*-*t*c*.com 🔒 | 7.0 | zakra | F | — | Jun 7, 2026 |
| p*k*v*i*.ru 🔒 | Unknown | pskovkid | F | — | Jun 7, 2026 |
| e*e*t*o*-*n*i*e.ru 🔒 | 6.7.5 | inspira | F | — | Jun 7, 2026 |
| b*i*h*b*u*.jp 🔒 | 6.4.8 | brightblue | F | — | Jun 7, 2026 |
| t*e*r*e*r*o*.de | 6.4.3 | twentytwentyfour | F | — | Jun 7, 2026 |
| w*l*e*w*r*.c*m.my 🔒 | 6.9.4 | hello-elementor | D | — | Jun 7, 2026 |
| b*v*n*u*k*a*d.c*.uk 🔒 | Unknown | Unknown | D | — | Jun 7, 2026 |
| s*o*.h*c*v*c*o*.ru 🔒 | 7.0 | hub | F | — | Jun 7, 2026 |
| c*u*.t*e*l*r*d*l*u*g*.com 🔒 | Unknown | uncode | F | — | Jun 7, 2026 |
| k*n*a*c*e*t*v*s*a*e.com 🔒 | Unknown | astra | D | — | Jun 7, 2026 |
| l*v*-*r*t*c*c*i*d*e*-*o*t*-*o*n*a*i*n.p*n*h*o*s*t*.io 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| d*v*a*c*i*-*h*l*r*n*y*u*h*f*u*d*t*o*.p*n*h*o*s*t*.io 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| o*s*g*t*l*h*z.hu 🔒 | Unknown | gehou | F | — | Jun 7, 2026 |
| s*e*k*r*y*.biz 🔒 | 4.7.29 | szep-kartya | F | — | Jun 7, 2026 |
| p*l*v*g*l.nl 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| d*g*t*l.m*t*i*m*d*a*e*v*c*s.com 🔒 | Unknown | vantage | F | — | Jun 7, 2026 |
| m*t*i*g*o*p*w*-*e*.m*t*i*d*v.net 🔒 | 7.0 | twentytwentyfive | F | — | Jun 7, 2026 |
| t*m*n*a*.c*.jp 🔒 | Unknown | tamentai | F | — | Jun 7, 2026 |
| m*n*t*u*.fr 🔒 | Unknown | mon-tour | F | Jun 7, 2026 | |
| r*d*a.k*d*n.cz 🔒 | 6.4.8 | radkatwodo | F | — | Jun 7, 2026 |
| b*g*i*e*m*.com 🔒 | Unknown | varia | D | — | Jun 7, 2026 |
| b*g*i*e*h*b.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| b*g*i*e*h*m*s.com 🔒 | 7.0 | oxygen-is-not-a-theme | C | — | Jun 7, 2026 |
| b*g*i*e*h*m*b*y*r*.com 🔒 | Unknown | Unknown | D | — | Jun 7, 2026 |
| b*g*i*e*g*o.com 🔒 | Unknown | Divi | C | — | Jun 7, 2026 |
| b*g*i*e*f*.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| b*g*i*e*f*l*f*s*i*a*.com 🔒 | 7.0 | newsphere | F | — | Jun 7, 2026 |
| b*g*i*e*f*c*o*i*g.com 🔒 | 7.0 | zino | F | — | Jun 7, 2026 |
| b*g*i*e*c*t*o*w*o*.com 🔒 | Unknown | twentytwentytwo | F | — | Jun 7, 2026 |
| b*g*i*e*c*i*o*r*c*i*.com 🔒 | Unknown | oceanwp | D | — | Jun 7, 2026 |
| b*g*i*e*b*e*.com 🔒 | 6.1.1 | hello-elementor | F | — | Jun 7, 2026 |
| b*g*i*e*b*i*s.com 🔒 | 6.9.1 | paddle | F | — | Jun 7, 2026 |
| b*g*i*e*b*i*.com 🔒 | 6.9.1 | paddle | F | — | Jun 7, 2026 |
| b*g*i*d*g*t*l.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 7, 2026 |
| b*g*i*t*a*e*s.com 🔒 | 7.0 | jupiterx-child | F | Jun 7, 2026 |