micropack.com.ar

Posture summary

Public attack surface (2 hostnames in Certificate Transparency)

Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.

The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.

Lookalike domains (5 registered of 88 checked)

Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.

2 further registered lookalike(s), 4 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.

Recommendations

• highEnforce DMARC

  No enforcing DMARC policy was observed. Publish a DMARC record and move to p=quarantine then p=reject to reduce spoofing.

• mediumEnable DNSSEC

  DNSSEC signing was not detected for this domain.

• highEnable valid HTTPS

  No valid TLS was observed on port 443.

• highClose risky exposed services

  1 risky service port(s) appear internet-exposed. Restrict them behind a firewall or VPN.

• criticalPatch known-exploited vulnerabilities

  3 known-exploited vulnerability(ies) may affect exposed services. Prioritize patching.

• criticalPatch what already has a public exploit

  3 vulnerability(ies) reported on this host have working exploit code published (Exploit-DB, Metasploit, Nuclei or a public PoC). Exploitation needs no development effort — patch these first.

• highMonitor lookalike domains

  4 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.

• highGet a full security audit

  Multiple exposures were detected. A professional audit can prioritize remediation.