WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| v*e*e*4.ru 🔒 | Unknown | root | F | — | Jun 7, 2026 |
| l*g*n*r*h*u*e*.de 🔒 | 5.5.1 | Unknown | F | — | Jun 7, 2026 |
| g*u*n*b*a*l*a*t*.a*f*l*-*o*d*a*s*n.de 🔒 | Unknown | generatepress | F | — | Jun 7, 2026 |
| m*h*w*g*t*t*e*n*e*.l*f*-*n*i*e.de 🔒 | Unknown | Divi | C | — | Jun 7, 2026 |
| k*j*t*i*r*e*.de 🔒 | 6.9.4 | blocksy | F | — | Jun 7, 2026 |
| v*t*c*a*h*n*.eu 🔒 | 6.8.5 | dt-the7 | F | — | Jun 7, 2026 |
| b*o*.g*i*.com 🔒 | 6.6.5 | grio | F | — | Jun 7, 2026 |
| s*p*.c*m.au 🔒 | 6.9.4 | minamaze | F | — | Jun 7, 2026 |
| v*r*n*.pl 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| l*s*l*c*s.c*m.au 🔒 | Unknown | twentytwentyfour | F | — | Jun 7, 2026 |
| r*d*i*.net 🔒 | Unknown | astra | F | — | Jun 7, 2026 |
| t*b*k.ru 🔒 | 6.4.1 | education-hub | F | — | Jun 7, 2026 |
| t*m*n*r.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| m*r*i*s*l*t*o*s.nl 🔒 | 6.9.4 | inspiro | F | — | Jun 7, 2026 |
| a*n*e*n*e*k*n*.be 🔒 | Unknown | uncode-child | D | — | Jun 7, 2026 |
| c*n*e*e*c*.n*m*a.org 🔒 | 6.9.4 | responsive | F | — | Jun 7, 2026 |
| k*e*a*h.ru 🔒 | Unknown | coraline | F | — | Jun 7, 2026 |
| s*r*n*t.c*r*o*.ru 🔒 | Unknown | TE-church-card | F | — | Jun 7, 2026 |
| a*r*m.ru 🔒 | 7.0 | moka | F | — | Jun 7, 2026 |
| n*k*e*l*h.com 🔒 | 7.0 | learnify | F | — | Jun 7, 2026 |
| n*m*k*r.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| n*o*n*c*i*n.com 🔒 | 6.9.4 | archi | F | — | Jun 7, 2026 |
| n*r*s*a*r*n*.com 🔒 | 7.0 | laurent | F | — | Jun 7, 2026 |
| n*t*b*y*.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| n*a*c*.com 🔒 | 7.0 | umbreonblog | D | — | Jun 7, 2026 |
| n*c*l*k*e*i*a.com 🔒 | Unknown | flatsome | F | — | Jun 7, 2026 |
| n*c*r*f*s*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*e*r*k*.com 🔒 | 6.9.4 | makoa | F | — | Jun 7, 2026 |
| s*e*g*e*o*.de 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| g*e*m*t*e*s*r*u*.org 🔒 | 7.0 | betheme | F | — | Jun 7, 2026 |
| y*g*-*e*a*t*-*a*s.de 🔒 | 7.0 | yoga-vedanta | F | — | Jun 7, 2026 |
| f*x*a*.org 🔒 | 6.9 | twentyseventeen | F | — | Jun 7, 2026 |
| u*y*e*g*s*.pro 🔒 | 6.9.4 | kadence | F | — | Jun 7, 2026 |
| n*k*n*i*t*a*.com | 6.8 | jannah | F | — | Jun 7, 2026 |
| k*t*s*r*p*i*r*f*.com 🔒 | 7.0 | astrostar | F | — | Jun 7, 2026 |
| m*n*c*p*l*r*h*v*s.c*t*o*a*h*n*.gr 🔒 | Unknown | ignition-carbone | F | — | Jun 7, 2026 |
| s*9*2.p*0.s*t*s.p*e*s*n*.com | Unknown | Divi | F | — | Jun 7, 2026 |
| s*l*a*o*e*.s*a*t*n*i*e*r*e*.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| j*s*i*e.se 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| p*e*a*d.se 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| c*l*s*r*l*.c*c.cat 🔒 | 6.9.4 | dt-the7 | F | Jun 7, 2026 | |
| v*y*e*s.c*.za 🔒 | 6.8.3 | wens-haelo | F | — | Jun 7, 2026 |
| i*i*o*a*a*.hu 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| r*-*r*f*.c*.jp 🔒 | Unknown | craft | F | — | Jun 7, 2026 |
| t*e*e*e*v*i*.events 🔒 | 5.7.12 | enfold | F | — | Jun 7, 2026 |
| o*c*d*-*n*.com 🔒 | Unknown | multipress | F | — | Jun 7, 2026 |
| c*r*o*o*r*u*t*c*u*a.es 🔒 | 6.5.8 | rhye | F | — | Jun 7, 2026 |
| p*p*i*a*t*s*e*e*n*r*.fr 🔒 | 6.9.4 | transcend | F | — | Jun 7, 2026 |
| h*a*t*-*n*o*m*t*c*.c*.u*.ee 🔒 | 7.0 | astra | C | — | Jun 7, 2026 |
| c*p*c*d*h*m*e*m*s*c.org 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |