WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| m*c*n*c*m*b*l*.fr 🔒 | Unknown | carutos | F | — | Jun 7, 2026 |
| t*i*n*a*e*.io 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| c*u*i*o*c*e*h*.es 🔒 | 7.0 | default | F | — | Jun 7, 2026 |
| b*t*p*r*a*.i*g*.cat 🔒 | 6.8.5 | hueman | F | Jun 7, 2026 | |
| p*e*e*c*e*e*.com | Unknown | Divi-child | F | — | Jun 7, 2026 |
| r*g*r*a*e.com 🔒 | 6.8.2 | elegantia-child | F | — | Jun 7, 2026 |
| d*m*.c*.il 🔒 | 7.0 | poza | F | — | Jun 7, 2026 |
| i*h*n*i*a*r*v*e*.com 🔒 | 7.0 | affvidco | F | — | Jun 7, 2026 |
| s*h*l*u*d*a*c*b*n*.de 🔒 | 6.8.3 | hello-elementor | F | — | Jun 7, 2026 |
| g*.l*o*d*p*e*z.com 🔒 | 7.0 | hello-elementor | D | — | Jun 7, 2026 |
| p*s*a*s*r*l*a.o*g.au 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| d*n*m*l*e*e*l*c*a*t.de | 6.8.5 | radiate | F | — | Jun 7, 2026 |
| e*i*s*r*n*.de 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| e*l*s*e*k.de 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| w*i*h*u*-*i*h*l.de 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| z*m*w*i*k*l*e*-*i*g*n.de 🔒 | 5.4 | Unknown | F | — | Jun 7, 2026 |
| n*b*r*c*n*e*t*o*.com 🔒 | 7.0 | minimog | F | — | Jun 7, 2026 |
| n*b*a*n*r*r*n*s.com 🔒 | 7.0 | Newspaper | F | — | Jun 7, 2026 |
| n*b*a*i*.com 🔒 | 7.0 | yuki | D | — | Jun 7, 2026 |
| n*b*e*e*t*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*b*e*a*i*r*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| n*b*a*e*l*h*a*e.com 🔒 | 6.9.4 | medilink | F | — | Jun 7, 2026 |
| n*b*m*l*1*4.com 🔒 | Unknown | cocoon-master | F | — | Jun 7, 2026 |
| n*b*-*i*r*b*o*.com 🔒 | Unknown | affinger | F | — | Jun 7, 2026 |
| n*b*d*n*a*-*m*l*n*.com 🔒 | Unknown | yaotemp | F | — | Jun 7, 2026 |
| n*b*j*.com | 7.0 | neve | F | — | Jun 7, 2026 |
| n*b*l*c*u*e.com 🔒 | 4.4.33 | treeson | F | — | Jun 7, 2026 |
| n*b*e*p*o*e*t*.com 🔒 | 6.9.4 | bb-theme | F | — | Jun 7, 2026 |
| n*b*e*a*e*g*a*i*n*.com 🔒 | 4.9.26 | flatsome | F | — | Jun 7, 2026 |
| n*b*d*r.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| n*b*d*b*y.com 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| n*b*d*r*t*r*s.com 🔒 | 7.0 | HighendWP | F | — | Jun 7, 2026 |
| c*m*e*g*0*4.i*o.c*r.it 🔒 | 7.0 | museo | F | — | Jun 7, 2026 |
| b*o*.k*m*.hu 🔒 | Unknown | ascend | C | — | Jun 7, 2026 |
| e*i*e*d*a*t*g*p*o*e*t*e*h*.w*c*m*t*g*n*.com 🔒 | Unknown | blockbase | F | — | Jun 7, 2026 |
| c*i*i*-*r*e*i*.com 🔒 | 6.9.1 | astra | F | — | Jun 7, 2026 |
| m*n*k*f*j*t*.com | 3.9.40 | minakofujita | F | — | Jun 7, 2026 |
| m*f*y*.jp 🔒 | Unknown | sugersugerbaby | F | — | Jun 7, 2026 |
| p*r*a*s.n*a*.ir 🔒 | Unknown | portals | D | — | Jun 7, 2026 |
| n*x*s*n*t.info 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| h*a*b*d*.c*.kr 🔒 | Unknown | dt-the7 | F | — | Jun 7, 2026 |
| m*r*c*e*l*n*c.c*.kr 🔒 | 6.8.5 | neve-child-master | F | — | Jun 7, 2026 |
| h*a*s*a*p.c*.kr 🔒 | 6.9.4 | dt-the7-child | F | — | Jun 7, 2026 |
| c*l*o*u*l*c.ch 🔒 | Unknown | Divi | D | — | Jun 7, 2026 |
| p*l*g*a*h*c.pub 🔒 | Unknown | Divi | D | — | Jun 7, 2026 |
| f*r*e*a*e.ch 🔒 | 6.7.5 | corretto | F | — | Jun 7, 2026 |
| a*b*r*e*a*i*n*.ch 🔒 | 6.9.4 | babette2026 | F | — | Jun 7, 2026 |
| s*p*i*f*r*a*-*s*c*o*o*u*.ch 🔒 | Unknown | twentytwentyfour | F | — | Jun 7, 2026 |
| 3*s.h*p*.ch 🔒 | 6.9.4 | tempera | D | — | Jun 7, 2026 |
| b*l*r*a*i*e.co 🔒 | Unknown | enfold | F | — | Jun 7, 2026 |