Enumerating vulnerable content providers