sigmaplasticsgroup.com

Posture summary

Public attack surface (31 hostnames in Certificate Transparency)

Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned.

The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.

Lookalike domains (6 registered of 150 checked)

Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.

3 further registered lookalike(s), 0 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.

Recommendations

• highEnforce DMARC

  No enforcing DMARC policy was observed. Publish a DMARC record and move to p=quarantine then p=reject to reduce spoofing.

• mediumEnable DKIM

  No DKIM record was found on common selectors. Enable DKIM signing.

• mediumEnable DNSSEC

  DNSSEC signing was not detected for this domain.

• mediumLookalike domains are registered

  6 permutation(s) of this domain resolve. None accept mail today, but that can change without notice.

• mediumReview the public subdomain footprint

  31 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.