Posture summary
Email authentication
SPF ✓ DMARC reject DKIM ✗ DNSSEC ✗TLS / certificate
TLS TLSv1.3 55d to expiryInternet exposure
2 open ports 0 KEVBreach metadata
0 public breachesDomain & hosting
250 public hostnames registered 1997 AS15169 · GOOGLE - Google LLC no blocklist hitsPublic attack surface (250 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.
Lookalike domains (36 registered of 66 checked)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.
| Domain | Type | Mail-capable |
|---|---|---|
| boogle.com | keyboard | yes |
| foogle.com | keyboard | yes |
| g0ogle.com | homoglyph | yes |
| ggoogle.com | repetition | yes |
| gogle.com | omission | yes |
| gogole.com | transposition | yes |
| gooble.com | keyboard | yes |
| goog-le.com | hyphen | yes |
| googel.com | transposition | yes |
| googl.com | omission | yes |
| google.eu | tld | yes |
| google.info | tld | yes |
| google.io | tld | yes |
| google.net | tld | yes |
| google.org | tld | yes |
| googlee.com | repetition | yes |
| googlr.com | keyboard | yes |
| goolge.com | transposition | yes |
| gooogle.com | repetition | yes |
| hoogle.com | keyboard | yes |
| login-google.com | prefix | yes |
| ogogle.com | transposition | yes |
| oogle.com | omission | yes |
| securegoogle.com | prefix | yes |
| www-google.com | prefix | yes |
| wwwgoogle.com | prefix | yes |
| g-oogle.com | hyphen | no |
| goofle.com | keyboard | no |
| googe.com | omission | no |
| google.co | tld | no |
| googlle.com | repetition | no |
| goohle.com | keyboard | no |
| gpogle.com | keyboard | no |
| mail-google.com | prefix | no |
| portal-google.com | prefix | no |
| toogle.com | keyboard | no |
Recommendations
-
mediumEnable DKIM
No DKIM record was found on common selectors. Enable DKIM signing.
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
highMonitor lookalike domains
26 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.
-
mediumReview the public subdomain footprint
250 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.