ruhrpumpen.com

Posture summary

Public attack surface (52 hostnames in Certificate Transparency)

Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned.

The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.

Lookalike domains (2 registered of 92 checked)

Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.

Recommendations

• mediumEnable DNSSEC

  DNSSEC signing was not detected for this domain.

• criticalPatch known-exploited vulnerabilities

  1 known-exploited vulnerability(ies) may affect exposed services. Prioritize patching.

• criticalPatch what already has a public exploit

  1 vulnerability(ies) reported on this host have working exploit code published (Exploit-DB, Metasploit, Nuclei or a public PoC). Exploitation needs no development effort — patch these first.

• criticalReset credentials seen in infostealer logs

  Public infostealer telemetry associates 5 employee credential set(s) with this domain — passwords captured from infected devices, which bypass password policy and often session-hijack past MFA. The most recent dates from 2025-08-22. Most commonly Generic Stealer. Force a reset for the affected services, invalidate active sessions, and check the devices themselves.

• mediumStrengthen password requirements

  80% of the exposed employee passwords analysed rate as weak or very weak. Raise minimum length and screen new passwords against breach lists.

• highMonitor lookalike domains

  2 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.

• mediumReview the public subdomain footprint

  52 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.