WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| b*g*e*t*a*l*r*o*l*.com 🔒 | Unknown | epicstrap | F | — | Jun 7, 2026 |
| b*g*g*o*a*.com 🔒 | Unknown | kadence | F | — | Jun 7, 2026 |
| b*g*h*c*e*v*t*l*n*c.com 🔒 | Unknown | oceanwp | F | — | Jun 7, 2026 |
| b*g*h*n*d*g*t*l.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| i*t*a*a*i*e.kz 🔒 | 6.7.5 | Unknown | D | — | Jun 7, 2026 |
| b*u*s*e*e*d.com 🔒 | 7.0 | extendable | F | — | Jun 7, 2026 |
| m*x*o*e*8*c*m.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| u*o*i*z*n*.gr 🔒 | Unknown | neeon | F | — | Jun 7, 2026 |
| t*u*i*m*d*v*l*p*e*t.fr 🔒 | 6.9.4 | tourismdevelopment22 | F | — | Jun 7, 2026 |
| e*f*b*r.es 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| v*g*i*f*s*.pt 🔒 | 7.0 | organio | F | — | Jun 7, 2026 |
| s*.m*k*g*w*-*.a*.jp 🔒 | Unknown | cocoon-master | F | — | Jun 7, 2026 |
| p*y.m*k*g*w*-*.a*.jp 🔒 | Unknown | cocoon-master | F | — | Jun 7, 2026 |
| h*o*g*-*o*d*n*n*t.jp 🔒 | Unknown | hssn | F | — | Jun 7, 2026 |
| n*k*n*z*w*.jp 🔒 | Unknown | lightning-child | F | — | Jun 7, 2026 |
| z*h*a*z*-*a*k*r*.de 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| t*e*a*e*i*.com 🔒 | Unknown | blocksy | F | — | Jun 7, 2026 |
| w*m*n*o*f*s*i*n.b*l*a*o*n*.space 🔒 | 5.3.21 | claue | F | — | Jun 7, 2026 |
| a*t*o*o*r*e*.c*m.br 🔒 | 6.8.5 | hello-elementor | F | — | Jun 7, 2026 |
| b*e*k*r*i*e*n*a*d*.de 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*t*o*w*r*s.jp 🔒 | 6.8.5 | dt-the7 | F | — | Jun 7, 2026 |
| n*o*v.com 🔒 | 7.0 | blocksy | F | — | Jun 7, 2026 |
| n*o*i*g*-*u*o*.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| n*n*s*p*n*d*.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 7, 2026 |
| n*l*e*i*e*.com 🔒 | 7.0 | twentytwentyfour | F | — | Jun 7, 2026 |
| n*l*o*p*n*e*.com 🔒 | 7.0 | conult | F | — | Jun 7, 2026 |
| b*o*d*i*v*s*i*o*.c*m.br 🔒 | 6.9.4 | Newspaper | F | — | Jun 7, 2026 |
| r*d*o*a*q*e*m.es 🔒 | 7.0 | grip | F | — | Jun 7, 2026 |
| s*d*e*p*s*c*e*.c*m.au 🔒 | 6.9.4 | oxygen-is-not-a-theme | A | — | Jun 7, 2026 |
| d*a*e*e*y*.fr 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| f*n*y*-*a*u*l*e*s*.fr 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| p*i*t*a*o*.ru 🔒 | 4.9.4 | ridizain | F | — | Jun 7, 2026 |
| o*h*i*.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| c*l*o*a*l.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| a*e*a*a*t.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| y*l*a*n*b*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*o*.s*b*a.org 🔒 | 6.8.5 | newsmash | F | — | Jun 7, 2026 |
| x*i*a*t*v.org 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| c*k*i*t*v.online 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| 9*p*u*t*.i*.net 🔒 | 6.8.1 | cakhiatv | F | — | Jun 7, 2026 |
| x*m*o*g*a.c*m.co 🔒 | 6.8.1 | cakhiatv | F | — | Jun 7, 2026 |
| t*u*t*e*b*n*d*.fyi 🔒 | 6.8.1 | cakhiatv | F | — | Jun 7, 2026 |
| v*b*t*.net 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| n*a*a*u*t*n*.i*.net 🔒 | Unknown | flatsome | C | — | Jun 7, 2026 |
| u*i*e*s*t*h*n*r*.u*d.edu 🔒 | 7.0 | twentytwentyfive | F | — | Jun 7, 2026 |
| b*a*b*e*n*w*g*.c*.uk 🔒 | Unknown | kadence-child | F | — | Jun 7, 2026 |
| b*g*e*w*b*e*i*n.com 🔒 | Unknown | enfold | F | — | Jun 7, 2026 |
| b*g*e*a*s*o*t*u*.com 🔒 | 7.0 | ashe | F | — | Jun 7, 2026 |
| b*g*e*a*v*l*e*f*r*.com 🔒 | 7.0 | catch-fullscreen | F | — | Jun 7, 2026 |
| b*g*e*c*n*r*t*.com 🔒 | 5.0.22 | getleads | F | — | Jun 7, 2026 |