drancy.fr

Posture summary

Public attack surface (14 hostnames in Certificate Transparency)

Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned.

The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.

Lookalike domains (6 registered of 67 checked)

Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.

3 further registered lookalike(s), 5 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.

Recommendations

• highEnforce DMARC

  No enforcing DMARC policy was observed. Publish a DMARC record and move to p=quarantine then p=reject to reduce spoofing.

• highReset credentials seen in infostealer logs

  Public infostealer telemetry associates 1 employee credential set(s) with this domain — passwords captured from infected devices, which bypass password policy and often session-hijack past MFA. Force a reset for the affected services, invalidate active sessions, and check the devices themselves.

• highMonitor lookalike domains

  5 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.