Can view all username leaked in https://core.blockstack.org

How it was found

Hello team,

This should be private hide all username who registered in blockstack.org the attacker can get the information of a user

https://core.blockstack.org/v1/subdomains?page=10

i thought it is a demo users but i found my username in the list this should be private

[
  "demoaccount1.stealthy.id", 
  "demoaccount2.stealthy.id", 
  "demoaccount3.stealthy.id", 
  "demoaccount4.stealthy.id", 
  "demoaccount5.stealthy.id", 
  "demon.id.blockstack", 
  "denilton.id.blockstack", 
  "denizz009.id.blockstack", 
  "denkijin.id.blockstack", 
  "dennis.id.blockstack", 
  "dennis1995.id.blockstack", 
  "dennis95.id.blockstack", 
  "dennis_linux.id.blockstack", 
  "dennislwm.id.blockstack", 
  "denranevski.stealthy.id", 
  "densiki.id.blockstack", 
  "dentistryuncensored.verified.podcast", 
  "derek.stealthy.id", 
  "derekagilbert.id.blockstack", 
  "derekgilbert.id.blockstack", 
  "dermatology.verified.podcast", 
  "design.id.blockstack", 
  "designmatters.verified.podcast", 
  "destiny.verified.podcast", 
  "destinycommunity.verified.podcast", 
  "dev_orv.id.blockstack", 
  "developertea.verified.podcast", 
  "deverickc.id.blockstack", 
  "devilcoders.id.blockstack", 
  "devtest.id.blockstack", 
  "devuniversalwallet.id.blockstack", 
  "dexter24.id.blockstack", 
  "dexterguff.verified.podcast", 
  "dezirae.stealthy.id", 
  "dhiraj362.id.blockstack", 
  "dhlee702.id.blockstack", 
  "dhsmith.id.blockstack", 
  "dhwan291.id.blockstack", 
  "dicetower.verified.podcast", 
  "didisimon.stealthy.id", 
  "dietze.id.blockstack", 
  "diggins.id.blockstack", 
  "dilara.stealthy.id", 
  "dilipdom.id.blockstack", 
  "dinhtuan.id.blockstack", 
  "dio1453.id.blockstack", 
  "dippolitos.id.blockstack", 
  "directcurrent.verified.podcast", 
  "directorscut.verified.podcast", 
  "dirtbagdiaries.verified.podcast", 
  "dirtyjohn.verified.podcast", 
  "dirua.id.blockstack", 
  "discovery.verified.podcast", 
  "discrete.id.blockstack", 
  "dishnation.verified.podcast", 
  "disney.id.blockstack", 
  "disparamargotdispara.verified.podcast", 
  "dissect.verified.podcast", 
  "diymusician.verified.podcast", 
  "djax22.stealthy.id", 
  "djfrankievazquez.verified.podcast", 
  "djgrind.verified.podcast", 
  "djordje.id.blockstack", 
  "djordje12.id.blockstack", 
  "djovani.stealthy.id", 
  "dki40447.id.blockstack", 
  "dlb.personal.id", 
  "dlc.verified.podcast", 
  "dmdb.id.blockstack", 
  "dnlkenanii.id.blockstack", 
  "doc.id.blockstack", 
  "domen19.id.blockstack", 
  "dominic.id.blockstack", 
  "domino_jack.id.blockstack", 
  "donedisappeared.verified.podcast", 
  "dontblameme.verified.podcast", 
  "dontkeepyourdayjob.verified.podcast", 
  "double11one.stealthy.id", 
  "douglovesmovies.verified.podcast", 
  "downdirtyradio.verified.podcast", 
  "dp.id.blockstack", 
  "dpjblock.stealthy.id", 
  "dpn.id.blockstack", 
  "dprandi.stealthy.id", 
  "dpsoccerdude101.id.blockstack", 
  "draft.verified.podcast", 
  "dragan007.id.blockstack", 
  "dragonsinplaces.verified.podcast", 
  "drdrew.verified.podcast", 
  "dreambig.verified.podcast", 
  "dreamer.id.blockstack", 
  "dreaming4evers.stealthy.id", 
  "drfloyd.verified.podcast", 
  "driester.id.blockstack", 
  "drifting.id.blockstack", 
  "drinkchamps.verified.podcast", 
  "drlarsdingman.verified.podcast", 
  "drlauracalloftheday.verified.podcast", 
  "druhela.id.blockstack", 
  "drunksanddragons.verified.podcast"
]

Impact

Information Disclosure