WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| k*i*z*e*-*m*h.de 🔒 | 7.0 | Avada | F | — | Jun 7, 2026 |
| a*p*n*k*e*t*.de 🔒 | 7.0 | Avada | F | — | Jun 7, 2026 |
| f*u*c*t*v*r*e*t*n*-*a*d.de 🔒 | 7.0 | dt-the7 | F | — | Jun 7, 2026 |
| p*o*i*o*l.net 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*a*d*-*u*l*e*.de 🔒 | 6.1.10 | Total | F | — | Jun 7, 2026 |
| s*a*j*c*.ru 🔒 | Unknown | theme | F | — | Jun 7, 2026 |
| s*m*y*t*i*r.de 🔒 | 7.0 | lay | F | — | Jun 7, 2026 |
| t*r*u*z*e*i*e*r*n*a*.c*m.au 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| c*b*t*w*.c*m.au 🔒 | Unknown | blocksy | D | — | Jun 7, 2026 |
| c*n*f*4.a*t*u*n*t.com 🔒 | 7.0 | sydney | F | — | Jun 7, 2026 |
| m*t*o*e*p*o*.q*e*r*-*i*d*n*.de | 7.0 | Methodenpool | F | — | Jun 7, 2026 |
| m*s*e*h*c.es 🔒 | 7.0 | generatepress | F | — | Jun 7, 2026 |
| x*v*t*c.c*t*c.u*c.es 🔒 | 7.0 | sydney | D | — | Jun 7, 2026 |
| o*i*i*n*b*r*c*.com 🔒 | 7.0 | fox | F | — | Jun 7, 2026 |
| n*l*r*p*n*a*t.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*l*n*l*.com 🔒 | Unknown | onenav | F | — | Jun 7, 2026 |
| n*l*o*a*a*t.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*l*o*a*f*l*a*i.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*l*p*r*u*s.com 🔒 | 7.0 | storefront | F | — | Jun 7, 2026 |
| n*l*t*a*o*i*t*c*.com 🔒 | 7.0 | nilotia | F | — | Jun 7, 2026 |
| n*l*u*a*m*h*e*i.com 🔒 | 7.0 | cele | F | — | Jun 7, 2026 |
| n*l*w*.com 🔒 | 7.0 | astra | C | — | Jun 7, 2026 |
| b*u*o*c*u*z.d*b*o*.pl 🔒 | Unknown | dybook | F | — | Jun 7, 2026 |
| w*l*z*w*k*.pl 🔒 | 7.0 | intimate-plus | F | — | Jun 7, 2026 |
| p*o*r*m*w*n*e*w*r*c*u.pl 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| w*s*a*k*s*k*l*.pl 🔒 | 6.4.3 | inspiro | F | — | Jun 7, 2026 |
| c*e*e*a*d*a*b*a*l*b.com 🔒 | 7.0 | bluehost-blueprint | F | — | Jun 7, 2026 |
| x*e*s*.ai 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| g*u*n*-*m*e*m*o*.de 🔒 | Unknown | sunflower | F | — | Jun 7, 2026 |
| b*o*.z*i*t.co 🔒 | 6.5.8 | type | F | — | Jun 7, 2026 |
| a*u*v*d*-*a*u*e*.com 🔒 | 7.0 | woodmart | F | — | Jun 7, 2026 |
| a*u*v*i*.com 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| a*u*v*d*-*n*o.com 🔒 | 7.0 | anyo | F | — | Jun 7, 2026 |
| a*u*v*d*-*a*e*s.com 🔒 | Unknown | ayurveda-badems | F | — | Jun 7, 2026 |
| a*u*v*d*-*a*a*c*.com 🔒 | 6.9.4 | extendable | F | — | Jun 7, 2026 |
| a*u*v*d*-*a*b*r*.com 🔒 | 7.0 | generatepress_child | F | — | Jun 7, 2026 |
| a*u*v*d*-*e*u*y*c*l*e*e.com 🔒 | 5.6 | theme_abcmain | F | — | Jun 7, 2026 |
| a*u*v*d*-*l*b.com 🔒 | Unknown | twentytwentylms | F | — | Jun 7, 2026 |
| a*u*v*d*-*o*s*i*-*a*i*.com 🔒 | 7.0 | mantras | F | — | Jun 7, 2026 |
| a*u*v*d*-*e*b*l*r*m*d*.com 🔒 | 7.0 | 111lottery | F | — | Jun 7, 2026 |
| a*u*v*d*-*i*a*a*i.com 🔒 | 7.0 | hidamari_web | F | — | Jun 7, 2026 |
| a*u*v*d*-*n*o*.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| a*u*v*d*-*a*a*e*l.com 🔒 | 4.7.29 | adelle | F | — | Jun 7, 2026 |
| a*u*s*u*y*g*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| a*u*s*a*e*i*i*i.com 🔒 | 7.0 | x-t9 | F | — | Jun 7, 2026 |
| a*u*s*r*a.com 🔒 | 6.8.5 | ml-theme | F | — | Jun 7, 2026 |
| a*u*t*m*s.com 🔒 | 7.0 | jannah | F | — | Jun 7, 2026 |
| a*u*u*s*i*t*u.com 🔒 | 7.0 | wp-min | F | — | Jun 7, 2026 |
| l*t*e*l*e*t*f*t*s.de 🔒 | 6.9.4 | semplice4 | F | — | Jun 7, 2026 |
| d*e*e*u*d*e*t*s*r*t*g*n.de 🔒 | Unknown | divi-child | F | — | Jun 7, 2026 |