WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| 2*-*5.ru 🔒 | 5.9.13 | graphy | F | — | Jun 7, 2026 |
| m*7*p*.ru 🔒 | 4.3.34 | olympus | F | — | Jun 7, 2026 |
| i*t*r*u*l*t*.de 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| p*r*4*.ru 🔒 | 6.2.9 | bam | F | — | Jun 7, 2026 |
| c*i*.s*i*a*a.pl 🔒 | 7.0 | agnar | F | — | Jun 7, 2026 |
| e.3*k*v.com 🔒 | Unknown | 3cktv | F | — | Jun 7, 2026 |
| c*-*d*-*e*.g*w*r.c*m.ar 🔒 | 6.7.1 | blocksy | F | — | Jun 7, 2026 |
| t*a*a*a*a*t*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| m*n*o*t*i*.c*.uk 🔒 | Unknown | monmouth-it-theme-3-3 | F | — | Jun 7, 2026 |
| r*n*l*d*o*k*.cz 🔒 | 7.0 | appointment | F | — | Jun 7, 2026 |
| v*l*t*h*k*r*e*a.cz 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| c*n*m*h*-*p*.net 🔒 | 7.0 | generatepress | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*a*v*e.com 🔒 | 6.9.4 | BijouxFaivre | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*r*.com 🔒 | 6.0.12 | onepress | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*u*l*e*m*t*o.com 🔒 | 6.8.5 | bridge | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*r*i*e*.com 🔒 | 5.4.19 | monsta | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*e*o*r*a*s.com 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*e*i*s*e*.com 🔒 | Unknown | Avada-Child-Theme | F | — | Jun 7, 2026 |
| b*j*u*n*i*e.com 🔒 | Unknown | urna | B | — | Jun 7, 2026 |
| b*j*u*a*h*s.com 🔒 | 6.9.4 | blaszok | F | — | Jun 7, 2026 |
| b*j*u*i*.com 🔒 | 5.5.18 | colibri-wp | F | — | Jun 7, 2026 |
| b*j*u*c*u*d*.com 🔒 | 7.0 | enfold | F | — | Jun 7, 2026 |
| b*j*u*e*s*n*a*i*a*l*.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 7, 2026 |
| b*j*u*i*o.com 🔒 | Unknown | bijoupiko2022 | F | Jun 7, 2026 | |
| b*j*u*r.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 7, 2026 |
| b*j*u*q*a*e*l*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*j*u*a*e*t.com 🔒 | 6.8.5 | Unknown | F | — | Jun 7, 2026 |
| b*j*u*a*t*o.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*m*t*y*t*.com 🔒 | 7.0 | custom-made | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*r*e*i*.com 🔒 | 4.9.29 | Avada | F | — | Jun 7, 2026 |
| b*j*u*e*i*-*i*o*a*d.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| b*j*u*s.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| n*g*t*w*j*n*t*r*a*i*a*o.com | 7.0 | astra | F | — | Jun 7, 2026 |
| n*g*t*i*e*a*d*c*p*n*.com 🔒 | 6.9.4 | vw-gardening-landscaping-pro | F | — | Jun 7, 2026 |
| n*g*t*i*g*r*r*s*.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 7, 2026 |
| n*g*t*k*d*m*s.com 🔒 | 7.0 | Avada | F | — | Jun 7, 2026 |
| n*g*t*t*n*l*t*r*r*.com 🔒 | 7.0 | yith-wonder | F | — | Jun 7, 2026 |
| n*g*t*a*k*i*o.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*g*t*n*a*e*a*e*o*e*l*c.com 🔒 | Unknown | betheme | F | — | Jun 7, 2026 |
| n*g*t*n*a*e*a*i*g*o*u*i*n*.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| n*g*t*n*a*e*o*d*.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| n*g*t*o*t.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| n*g*t*y*a*m.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| m*n*o*a*.com | Unknown | Divi | F | — | Jun 7, 2026 |
| r*f*e*i*n*s*a*l*s*u*i*o*o*.w*c*m*t*g*n*.com 🔒 | Unknown | astra | D | — | Jun 7, 2026 |
| h*d*n*c*.es 🔒 | Unknown | wpzoom-prime-news | F | — | Jun 7, 2026 |
| f*a*.es 🔒 | 5.7.2 | dt-the7 | F | — | Jun 7, 2026 |
| o*l*l*c*o*.com 🔒 | 7.0 | bloglo | F | — | Jun 7, 2026 |
| t*a*c*a*h.pl 🔒 | 7.0 | mental-care | F | — | Jun 7, 2026 |
| s*k*l*n*a*l*p*a*o*n*k*w.pl 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |