The Cyber Exposure Score is a published 0–100 formula built only from publicly observable signals. How this is calculated.
Posture summary
Email authentication
SPF ✗ DMARC ✗ DKIM ✗ DNSSEC ✗DNS hygiene
4 nameservers single DNS provider CAA ✗ IPv6 ✗Web & transport hygiene
HTTPS redirect ✓ HSTS ✗ CSP ✗ security.txt ✗TLS / certificate
TLS TLSv1.3 81d to expiryInternet exposure
2 open ports 0 KEVBreach metadata
0 public breaches no leak-site listingDomain & hosting
7 public hostnames AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK no blocklist hitsAlso analysed: www.ci.mt-angel.or.us
ci.mt-angel.or.us sends visitors to www.ci.mt-angel.or.us. Same registered domain, so the mail, DNS, lookalike and breach findings above apply to it unchanged; these are its own website checks.
score 72/100 · fair TLS TLSv1.3 61d to expiry HTTPS redirect ✗ HSTS ✗ CSP ✗ CDN edge — its 11 ports are the CDN's 0 KEVPublic attack surface (7 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned.
The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.
Lookalike domains (4 registered of 117 checked, 2 serving no website)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing. The Risk score (0–100) is a published formula weighing mail capability, registration age, spelling, what the homepage shows and phishing-feed hits, reduced when a name looks brand-owned (same registrar/nameservers, a redirect to this domain) or merely parked. How this is calculated.
| Domain | Type | Mail-capable | Registered | Risk |
|---|---|---|---|---|
| mt-angel.oor.us | repetition | no | — | 23 medium |
| mt-angel.or.net | tld | no | — | 23 medium |
| mt-angel.or.com | tld | no parked | — | 0 low |
1 further registered lookalike(s), 0 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.
Recommendations
-
highEnforce DMARC
No enforcing DMARC policy was observed. Publish a DMARC record and move to p=quarantine then p=reject to reduce spoofing.
-
highPublish SPF
No SPF record was observed. Publish one listing authorized senders.
-
mediumEnable DKIM
No DKIM record was found on common selectors. Enable DKIM signing.
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
mediumLookalike domains are registered
4 permutation(s) of this domain are registered (2 of them serving a website). None accept mail today, but that can change without notice.
Sources: Ransomware.live · Have I Been Pwned (CC BY 4.0) · Shodan InternetDB
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.