Posture summary
Email authentication
SPF ✓ DMARC reject DKIM ✓ DNSSEC ✗TLS / certificate
TLS TLSv1.3 81d to expiryInternet exposure
13 open ports 0 KEVBreach metadata
0 public breachesDomain & hosting
424 public hostnames registered 2007 AS13335 · CLOUDFLARENET - Cloudflare, Inc. no blocklist hitsPublic attack surface (424 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.
Lookalike domains (38 registered of 67 checked)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.
| Domain | Type | Mail-capable |
|---|---|---|
| 0penai.com | homoglyph | yes |
| myopenai.com | prefix | yes |
| olenai.com | keyboard | yes |
| op-enai.com | hyphen | yes |
| opeai.com | omission | yes |
| opeani.com | transposition | yes |
| opejai.com | keyboard | yes |
| opemai.com | keyboard | yes |
| open-ai.com | hyphen | yes |
| opena-i.com | hyphen | yes |
| opena.com | omission | yes |
| opena1.com | homoglyph | yes |
| openai.co | tld | yes |
| openai.eu | tld | yes |
| openai.io | tld | yes |
| openai.net | tld | yes |
| openak.com | keyboard | yes |
| openia.com | transposition | yes |
| opennai.com | repetition | yes |
| opensi.com | keyboard | yes |
| openzi.com | keyboard | yes |
| oprnai.com | keyboard | yes |
| loginopenai.com | prefix | no |
| lpenai.com | keyboard | no |
| ooenai.com | keyboard | no |
| op3nai.com | homoglyph | no |
| opehai.com | keyboard | no |
| openai.app | tld | no |
| openai.online | tld | no |
| openai.xyz | tld | no |
| openau.com | keyboard | no |
| openi.com | omission | no |
| openqi.com | keyboard | no |
| opnai.com | omission | no |
| penai.com | omission | no |
| ppenai.com | keyboard | no |
| secureopenai.com | prefix | no |
| www-openai.com | prefix | no |
Recommendations
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
highMonitor lookalike domains
22 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.
-
mediumReview the public subdomain footprint
424 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.