samsung.com

15-check dossier · scoreboard above, section details below

Get a pack →

Scanning…

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

resolving mx…

spf

info

Open standalone →

resolving spf…

dmarc

info

Open standalone →

resolving dmarc…

dkim

info

Open standalone →

probing dkim selectors…

tls

info

Open standalone →

fetching tls cert…

redirects

info

Open standalone →

tracing redirects…

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

inspecting web surface…

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.

samsung.com

15-check dossier · scoreboard above, section details below

Get a pack →

Mostly compliant · 5 items need attention

Aggregate grade across 15 checks. Auditors typically flag any High-severity finding.

Pass: 10
Warn: 5
Fail: 0

What an auditor would flag first

medium
SPF
~all softfail — receivers may still accept
SOC 2 CC6.7ISO 27001 A.13.2.1
medium
DMARC
p=none — monitoring only, no enforcement
SOC 2 CC6.7ISO 27001 A.13.2.1
low
DKIM
no DKIM selectors found — likely not configured
SOC 2 CC6.7

Need this as an artifact your auditor can verify?

Your samsung.com scan flagged 2 medium and 3 low findings. A signed pack covers the apex plus up to 100 CT-discovered subdomains, Ed25519-signed and ISO-timestamped, delivered in 10–30 minutes.

Get a pack →See methodology See a sample$29

Scanning…

15-check summary

DNS recordsA/AAAA records present
MX1 MX record(s) present
SPF~all softfail — receivers may still accept
DMARCp=none — monitoring only, no enforcement
DKIMno DKIM selectors found — likely not configured
TLS certificatecert valid for 141 days
Redirect chainHTTPS served correctly
Security headers4 security header(s) missing
CORSno CORS headers — cross-origin requests blocked by default
Web surfaceHTTPS surface reachable (robots ✓, sitemap ✓, title ✓)
MTA-STSnot applicable: no _mta-sts TXT record
TLS-RPTnot applicable: no TLSRPT record
DNSSECDNSSEC not configured — no DS or DNSKEY records found
WHOISdomain registered until 2026-11-28
Certificate Transparencycheck failed: crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

dns

info

Open standalone →

A/AAAA records present

Why it matters: Without authoritative A or AAAA records on the apex, the domain is unreachable. Missing baseline DNS shows up in vendor reviews as evidence of unmanaged infrastructure (SOC 2 CC6.6).

A: ttl=199 211.45.27.231
AAAA: —
NS: ttl=300 dnsst2.samsung.com.
ttl=300 dns-gi1.samsung.com.
ttl=300 dns-gi2.samsung.com.
ttl=300 auth01.sam.ic.
ttl=300 dnsst.samsung.com.
ttl=300 dnssm.samsung.com.
ttl=300 dnssm2.samsung.com.
ttl=300 dns-awskr1.samsung.com.
SOA: ttl=300 auth01.awskr.ic. ssdomain.samsung.com. 2020085596 10800 3600 2419200 300
CAA: —
TXT: ttl=86400 " globalsign-domain-verification=d7cac74e387872153b45a1cf21f819ee"
ttl=86400 " docusign=022189ea-ba76-432a-abd7-19343970da7e"
ttl=86400 " globalsign-domain-verification=BF9A67D3968C1D5FEC1440B12347B6AF"
ttl=86400 " amazonses:GabQpmRJN86a4HQqoLu1IEu/b6hqbMTlQSHol1cVzhA="
ttl=86400 "globalsign-domain-verification=E636433F4A5B2209D29402CE4AE96D29"
ttl=86400 "dtm-domain-verification=sj6QpVm4qndJLuG0vmv2lv2WLlZ3g1EGLq9OItKaBQI"
ttl=86400 "google-site-verification=XioIPzfjKziFDv7svS2vFxobJ1j6ApORgnD43-La5jc"
ttl=86400 "pardot848313=56b423327c6bbcc73c4888f1e7a74aa35be107baa0d8dbc0d60d3078016cdedb"
ttl=86400 "pardot1061362=d72ade8848a288815d8cd7fcdedf8e2ea1ffdf37f2e6199b9c6d2b118b260b11"
ttl=86400 "pardot1061372=cd7a8dc7dac11576e3160df3645c3be60beb48d38262fe75e1b83b6ed4547e2f"
ttl=86400 "pardot1061382=ee554f6d1abf83530c2b3bd50be47bc5e417bb833dc9b2686e5c5c384d2e174c"
ttl=86400 "pardot1061392=f1c7431aa41d5e18d6f425faa7ee4bef2cc82af55471991546af317ad4988f6f"
ttl=86400 "pardot848313=94e68189fc6e698e53ab66f68f9fa66f68b14ab1837bac98f0a5b5b4dd57503d"
ttl=86400 "google-site-verification=If15ip-WHY67QHEaM6ka9WKCcxgFHbS1oaXJswpUbHQ"
ttl=86400 "smartsheet-site-validation=E2jBYaDqtbMgG1u9Jzz2eQBNGVL2eea-"
ttl=86400 "canva-site-verification=Lz0E97jjjyiBnq4nGgrBzg"
ttl=86400 "mongodb-site-verification=OK5ChSTjOEnRssN4ZNjB6y7xoqWBSraL"
ttl=86400 "google-site-verification=gVlQpmwAi4l7c9YZ6vgGKB"
ttl=86400 "google-site-verification=gVlQpmwAi4l7c9YZ6vgGKBrqIjduXkSx7ekuOPsOAlg"
ttl=86400 "docker-verification=a98547c5-d702-4b4b-9516-4331ed5171c8"
ttl=86400 "google-site-verification=2Qn3FwdHxOdx-U2EBlX2Aq6OPFHM-JGRpo5fN2vEr88"
ttl=86400 "globalsign-domain-verification=142A59A6E9D02E64F922A9C6893534A2"
ttl=86400 "pardot1061372=4fedddc5665b4f323efd74d4970852e6a46f8df316987974967da26bef35bf24"
ttl=86400 "pardot1061372=7f77a7e9d20bced708628f16f6245665a0b5d0ab840f492e5b8b9d0616ff8bff"
ttl=86400 "openai-domain-verification=dv-geyHaAZ2x2iRSG5mPLgCehBU"
ttl=86400 "google-gws-recovery-domain-verification=57248779"
ttl=86400 "dtm-domain-verification=5gAZbUOV4mzm7FcNMxN3Z_8Og_vvyqJh5FxCE_rh0zE"
ttl=86400 "cisco-ci-domain-verification=4d1fed540ceae17bd020e5d248bb657c382c66454d32a5984edd4871be659cea"
ttl=86400 "MS=ms51591264"
ttl=86400 "figma-domain-verification=74d791d52b49cbb05822c432d058f86bb47d2d97aa815d0ca470c6ef74a99003-1742422683 "
ttl=86400 "box-domain-verification=b82590942dde67b52e8c41dc0e492a02ade277c5aede0e6de0b3b8de28a0085a"
ttl=86400 "asv=bbc7c9d6c4c6acdc2124368f94efe110"
ttl=86400 "google-site-verification=Tb4utn-Cz0GYEzmsVzHfYhi6kv6XU--QYrYkfsVLwO0"
ttl=86400 "apple-domain-verification=1f6od6-lOUHNPseuv2qlLXryA-4aMi97KboxR65PVb0"
ttl=86400 "globalsign-domain-verification=BD8E0953267AFCAEF59AFBF5F00BEB67"
ttl=86400 "figma-domain-verification=fff7a09ce23c2d8329d368316712f1dcb0a29cb4c71a406f8f41dce4ef671081-1767768682"
ttl=86400 "samsung-domain-verification=9a471672-ab8b-442c-a646-b6fda8a9e698"
ttl=86400 "google-site-verification=4pYi1ZoA5M9sNwJ39mlfRLPA5w_J2lqCVFEVUPyojp8"
ttl=86400 "liveramp-site-verification=bLTcKGTyyCkVh8Zt5X8IYY9T4Uns9ZRoAEG6NPzTd-c"
ttl=86400 "google-gws-recovery-domain-verification=69734317"
ttl=86400 "pardot1005352=4bf1edcafe2d5f7ea48b1ab4c669194f7fb8492acec4617e4b3af673899d0f05"
ttl=86400 "pardot880362=0579f4b1009200bd5629bc294b593112ab1438df4ebedf4de300d36b4a35e5bf"
ttl=86400 "pardot1123213=e21329a1ef7ab24c2a6a00afb2c9cdf6409a12ea19fd8c37c70c53eb8cbd3176"
ttl=86400 "atlassian-domain-verification=YJdK2oq4udj7wXxpQw52IsGEJue0ar/5JYtGr9lwcGNCffiKwPSGDZIQH0JlESij"
ttl=86400 "globalsign-domain-verification=A931337188D2EF719A821F0016D8552E"
ttl=86400 "v=spf1 include:_spf.samsung.com ~all"
ttl=86400 "asv=8c95d437a5f5281bf0b46412ea6410ff"
ttl=86400 "globalsign-domain-verification=9382b64f06fad76d1ebac344380ab28b"
ttl=86400 "cisco-ci-domain-verification=37f06378ba0e1526ad9a057438e3f2a1d0888e4e21d4ce75160ac7475679e080"
ttl=86400 "miro-verification=16f39e2d161837f1d97cfb17ff7e81f243c68683"
ttl=86400 " 7029addd-cf82-4d9e-9ac6-45cd3e47e467"

fetched 2026-06-04T05:40:48.592Z

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

1 MX record(s) present

Why it matters: MX records direct inbound mail. Misconfiguration silently breaks email delivery and lets attackers stand up parallel MX hosts for spoofing campaigns (ISO 27001 A.8.21).

pri=10 mailin.samsung.com.

fetched 2026-06-04T05:40:48.237Z

mx

info

Open standalone →

resolving mx…

spf

medium

Open standalone →

~all softfail — receivers may still accept

Why it matters: SPF tells receiving servers which hosts may send mail for the domain. Without it, any sender can forge the envelope-from — the primary mechanism behind business-email-compromise (SOC 2 CC6.7).

Recommendations

Move to -all (hardfail) once your mail flow is confirmed — softfail gives no real protection

v=spf1 include:_spf.samsung.com ~all

v=spf1
include:_spf.samsung.com
~all

fetched 2026-06-04T05:40:48.061Z

spf

info

Open standalone →

resolving spf…

dmarc

medium

Open standalone →

p=none — monitoring only, no enforcement

Why it matters: DMARC binds SPF and DKIM into an enforceable policy (quarantine or reject) and surfaces spoofing attempts via aggregate reports. `p=none` or absent means spoofing succeeds silently (SOC 2 CC6.7).

Recommendations

Review rua= aggregate reports to confirm legitimate mail passes SPF/DKIM
Move to p=quarantine and then p=reject once mail flow is validated

v=DMARC1; p=none; rua=mailto:postmaster@samsung.com; ruf=mailto:postmaster@samsung.com

v=: DMARC1
p=: none
rua=: mailto:postmaster@samsung.com
ruf=: mailto:postmaster@samsung.com

fetched 2026-06-04T05:40:48.253Z

dmarc

info

Open standalone →

resolving dmarc…

dkim

low

Open standalone →

no DKIM selectors found — likely not configured

Why it matters: DKIM signs outbound mail so receivers can detect tampering. Missing selectors or rotated-away keys break DMARC alignment and let receivers downgrade trust (ISO 27001 A.8.24).

Recommendations

Enable DKIM signing in your mail provider and publish the provided TXT record
Common selectors: google._domainkey, selector1._domainkey (Microsoft), mail._domainkey

no DKIM record on probed selectors (default, google, k1, selector1, selector2, mxvault)

dkim

info

Open standalone →

probing dkim selectors…

tls

info

Open standalone →

cert valid for 141 days

Why it matters: A valid current TLS certificate is the baseline for data in transit. Expiry, weak chain, or hostname mismatch break HTTPS and fail PCI 4.2.1 / SOC 2 CC6.1.

subject cn:: *.samsung.com
issuer:: Sectigo Public Server Authentication CA OV R36 / Sectigo Limited
valid:: Apr 8 00:00:00 2026 GMT → Oct 23 23:59:59 2026 GMT
authorized:: yes
sha256:: C4:D0:DC:25:16:CC:9B:61:BE:6A:40:7A:C3:E1:01:B7:B5:C4:5B:95:45:53:B7:E6:E0:61:CD:EF:D2:CA:62:CC
sans: *.samsung.com
samsung.com

fetched 2026-06-04T05:40:48.678Z

tls

info

Open standalone →

fetching tls cert…

redirects

info

Open standalone →

HTTPS served correctly

Why it matters: Bare HTTP requests must redirect to HTTPS without dropping the user mid-chain. Plain-text fallback or open redirects fail PCI 4.2.1 and feed phishing chains (SOC 2 CC6.6).

final status: 200 · 3 hops

[301] https://samsung.com/
[301] https://www.samsung.com/
[200] https://www.samsung.com/us/

fetched 2026-06-04T05:40:49.383Z

redirects

info

Open standalone →

tracing redirects…

headers

low

Open standalone →

4 security header(s) missing

Why it matters: Security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy — defend against XSS, clickjacking, and downgrade attacks. Absent headers map directly to OWASP ASVS V14 findings (ISO 27001 A.8.23).

Recommendations

Add response header — Content-Security-Policy: default-src 'self' (tune per app)
Add response header — X-Content-Type-Options: nosniff
Add response header — Referrer-Policy: strict-origin-when-cross-origin
Add permissions-policy response header

final url: https://www.samsung.com/us/

security headers

strict-transport-security: max-age=31536000
content-security-policy: —
x-frame-options: SAMEORIGIN
x-content-type-options: —
referrer-policy: —
permissions-policy: —

other headers

alt-svc: h3=":443"; ma=93600
connection: keep-alive, Transfer-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 04 Jun 2026 05:40:49 GMT
etag: W/"5c339-65366821e4f50"
last-modified: Thu, 04 Jun 2026 05:06:35 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1780551648958_399280516_1514716310_36_21590_6_5_-";dur=1
set-cookie: device_type=pc; path=/; domain=.samsung.com
transfer-encoding: chunked
vary: Accept-Encoding
x-akamai-transformed: 9 - 0 pmb=mRUM,3
x-xss-protection: 0

fetched 2026-06-04T05:40:49.042Z

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

no CORS headers — cross-origin requests blocked by default

Why it matters: Overly permissive CORS (wildcard with credentials, or reflected origin) lets any origin read authenticated responses from this domain. OWASP A05 misconfiguration territory (NIST AC-4).

origin: https://domainposture.com
method: GET
preflight status: 301

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-06-04T05:40:48.910Z

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

HTTPS surface reachable (robots ✓, sitemap ✓, title ✓)

Why it matters: Public files — robots.txt, sitemap.xml, head meta — are what attackers see first during reconnaissance. Misadvertised paths, stale sitemaps, and verbose generators leak more than intended (ISO 27001 A.8.9).

robots.txt

present

User-agent: *
User-agent: Googlebot
User-agent: AdsBot-Google
User-agent: Googlebot-Image
User-agent: OAI-SearchBot
User-agent: GPTBot
User-agent: ChatGPT-User
User-agent: PerplexityBot
User-agent: Google-Extended
Disallow:
Disallow: /*/business/search/
Disallow: /*/parking
Disallow: /*/parking/
Disallow: /*/search/
Disallow: /*/ai-search/
Disallow: /*/business/ai-search/
Disallow: /*/aisearch/
Disallow: /*/business/aisearch/
Disallow: /*/system/*
Allow: /uk/info/contactus/email-the-ceo/
Disallow: /*/info/contactus/email-the-ceo/
Disallow: /*/c/p/
Disallow: /de/aboutsamsung/inner-circle-2017/
Disallow: /ru/cdm/*
Disallow: /uk/*productcompare
Disallow: /uk/wdc/*
Disallow: /us/dealer/*
Disallow: /us/epp/*
Disallow: /us/support/service/agent/*
Disallow: /us/business/search/
Disallow: /us/api/
Disallow: /us/trade-in/program-violation/
Disallow: /sg/ab/*
Disallow: /*/*bvstate*
Disallow: /*/_jcr_content/*
Disallow: /*/galaxy-s10-buy-test/*
Disallow: /*/connected-living/content-library/*
Disallow: /se/info/privacy/officecctv/
Disallow: /au/referral/referred-friend/
Disallow: /*/common/review/
Disallow: /*/edm/
Disallow: /au/email/
Disallow: /au/emailtest/
Disallow: /*/testhome/
Disallow: /*/home_gnb/
Disallow: /*/home_hq/
Disallow: /*/home_3rd/
Disallow: /*/home_notag/
Disallow: /*/home_75/
Disallow: /*/home_50/
Disallow: /*/home_25/
Disallow: /*/speedtest/*
Disallow: /us/business/new/*
Allow: /in/multistore/*
Allow: /hu/multistore/diakkedvezmenyek/
Allow: /es/multistore/es_samsungdeals/
Allow: /sg/multistore/sg_eppfinancing/offers_epp/sc_premium/
Allow: /es/multistore/es_canary_islands/
Allow: /co/multistore/co_epp_members/
Allow: /co/multistore/co_epp_corp_gointegro/
Allow: /co/multistore/co_epp_outlet/
Allow: /co/multistore/co_epp_secret/
Allow: /co/multistore/gobierno_co/
Allow: /co/multistore/pymes_co/
Allow: /pe/multistore/membersshop/
Allow: /cl/multistore/members/
Disallow: /*/multistore/*
Disallow: /ru/srr/
Disallow: /in/web/emi/*
Disallow: /chat/api/livechat/*
Disallow: /sec/search/searchresultB2c/*
Disallow: /sec/business/search/searchresult/*
Disallow: *jsessionid=*

User-agent: Yandex
Allow: /
Disallow: /ru/cdm/*
Disallow: /*/search/
Disallow: /ru/multistore/*
Disallow: /*/c/p/
Disallow: *jsessionid=*
Clean-param: utm
Clean-param: cid
Clean-param: bvstate
Clean-param: bvroute
Clean-param: samid
Clean-param: __BVSUBMISSIONPARAMETERS__&bvdisplaycode
Clean-param: dclid
Clean-param: frommarket
Clean-param: guid
Clean-param: _escaped_fragment_
Clean-param: adobe_mc_sdid
Clean-param: search
Clean-param: searchvalue
Clean-param: nm
Clean-param: 0utm_00000000content
Clean-param: action
Clean-param: adobe_mc_ref
Clean-param: AID
Clean-param: ampampampamp
Clean-param: ampamp
Clean-param: yclid
Clean-param: amp
Clean-param: at_preview_token
Clean-param: awc
Clean-param: bvaction
Clean-param: cjevent
Clean-param: clid
Clean-param: clr
Clean-param: electricfrom
Clean-param: email
Clean-param: eucid
Clean-param: from
Clean-param: gbraid
Clean-param: gclsrc
Clean-param: hcb
Clean-param: keyword
Clean-param: mdid
Clean-param: merchant
Clean-param: msk
Clean-param: nm
Clean-param: nw
Clean-param: offerId
Clean-param: oTyp
Clean-param: page
Clean-param: productId
Clean-param: products
Clean-param: q
Clean-param: ref
Clean-param: refx
Clean-param: ru_paid_ppc_yandex_none_ecommerce_smartbanner-cross-2019-ecom_pla_none_remarketingfrom
Clean-param: sa
Clean-param: segment
Clean-param: showroom
Clean-param: siteCode
Clean-param: smartphonesawc
Clean-param: soundbar-q-seriesmdid
Clean-param: spm
Clean-param: state
Clean-param: tag
Clean-param: trade-inmdid
Clean-param: twclid
Clean-param: uhd
Clean-param: utmn_term
Clean-param: zarsrc
Clean-param: pid
Clean-param: id
Clean-param: lang
Clean-param: rootpath
Clean-param: anchor
Clean-param: uid
Clean-param: source
Clean-param: tab
Clean-param: type
Clean-param: model
Clean-param: locale
Disallow: /africa_en/
Disallow: /africa_fr/
Disallow: /africa_pt/
Disallow: /al/
Disallow: /ar/
Disallow: /au/
Disallow: /at/
Disallow: /ba/
Disallow: /be/
Disallow: /be_fr/
Disallow: /br/
Disallow: /bg/
Dis

sitemap.xml

present — 97 url(s)

head

title: Samsung US | Mobile | TV | Home Electronics | Home Appliances | Samsung US
description: Discover the latest in electronic & smart appliance technology with Samsung. Find the next big thing from smartphones & tablets to laptops & tvs & more.

social

og:url: https://www.samsung.com/us/
og:image: https://www.samsung.com/etc.clientlibs/samsung/clientlibs/consumer/global/clientlib-common/resources/images/logo-square-letter.png
og:type: website
og:site_name: Samsung
og:locale: en
og:title: Mobile | TV | Home Electronics | Home Appliances | Samsung US | Samsung US
og:description: Discover the latest in electronic & smart appliance technology with Samsung. Find the next big thing from smartphones & tablets to laptops & tvs & more.
og:country-name: us
twitter:card: Summary
twitter:site: @SamsungUSA
twitter:creator: @SamsungUSA
twitter:url: https://www.samsung.com/us/
twitter:title: Mobile | TV | Home Electronics | Home Appliances | Samsung US | Samsung US
twitter:description: Discover the latest in electronic & smart appliance technology with Samsung. Find the next big thing from smartphones & tablets to laptops & tvs & more.
twitter:image: https://www.samsung.com/etc.clientlibs/samsung/clientlibs/consumer/global/clientlib-common/resources/images/logo-square-letter.png

fetched 2026-06-04T05:40:49.283Z

web-surface

info

Open standalone →

inspecting web surface…

dnssec

low

Open standalone →

DNSSEC not configured — no DS or DNSKEY records found

Why it matters: DNSSEC cryptographically signs DNS responses, blocking cache-poisoning attacks. US federal civilian agencies are required to enable it under OMB M-22-09 (NIST SC-20).

Recommendations

Enable DNSSEC in your DNS provider's control panel and add the resulting DS record at your registrar

enabled: no
DS records: —
DNSKEY records: —

fetched 2026-06-04T05:40:48.235Z

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

not applicable: no _mta-sts TXT record

Why it matters: MTA-STS forces inbound SMTP to use TLS and refuse downgraded connections. Without it, an in-path attacker can strip TLS and read mail in plaintext (SOC 2 CC6.7).

no _mta-sts TXT record

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

not applicable: no TLSRPT record

Why it matters: TLS-RPT publishes a reporting address for SMTP-TLS failures. Without it, downgrade attacks on inbound mail go unnoticed (SOC 2 CC7.2).

no TLSRPT record

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

info

Open standalone →

domain registered until 2026-11-28

Why it matters: Registrar and expiry tell auditors the domain is owned, current, and not about to lapse. An expired or about-to-expire domain fails business-continuity evidence (SOC 2 A1.2).

registrar: Whois Corp.
created: 1994-11-29T05:00:00Z
expires: 2026-11-28T05:00:00Z
statuses: clientTransferProhibited https://icann.org/epp#clientTransferProhibited, clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited

fetched 2026-06-04T05:40:48.996Z

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

check failed: crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

Why it matters: Every certificate issued for this domain is published in Certificate Transparency logs — including subdomains you may have forgotten. Unknown subdomains in CT are pre-disclosed attack surface (ISO 27001 A.8.16).

crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.