The Cyber Exposure Score is a published 0–100 formula built only from publicly observable signals. How this is calculated.
This domain scores better than 98% of the 367 Technology organisations we track (cohort median 79). The sample is seeded from public incident data, not a random cross-section of the sector.
Posture summary
Email authentication
SPF ✓ DMARC quarantine DKIM ✗ DNSSEC ✓ MTA-STS testingDNS hygiene
4 nameservers CAA ✓ IPv6 ✗Web & transport hygiene
HTTPS redirect ✓ HSTS ✓ HSTS preloaded CSP weak 2 insecure cookies security.txt ✓TLS / certificate
TLS TLSv1.3 123d to expiryInternet exposure
2 open ports 0 KEVBreach metadata
0 public breaches no leak-site listingDomain & hosting
50 public hostnames AS8560 · IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Intern no blocklist hitsAlso analysed: www.web.de
www.web.de sends visitors to web.de; both names are covered. The domain-level findings above apply to both; these are www.web.de's own website checks.
score 92/100 · good TLS TLSv1.3 123d to expiry HTTPS redirect ✓ HSTS ✓ CSP weak 2 open ports 0 KEVPublic attack surface (50 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.
The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.
Lookalike domains (51 registered of 60 checked, 2 serving no website)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing. The Risk score (0–100) is a published formula weighing mail capability, registration age, spelling, what the homepage shows and phishing-feed hits, reduced when a name looks brand-owned (same registrar/nameservers, a redirect to this domain) or merely parked. How this is calculated.
| Domain | Type | Mail-capable | Registered | Risk |
|---|---|---|---|---|
| eb.de | omission | yes | — | 66 high |
| eeb.de | keyboard | yes | — | 66 high |
| seb.de | keyboard | yes | — | 66 high |
48 further registered lookalike(s), 35 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.
Recommendations
-
mediumEnable DKIM
No DKIM record was found on common selectors. Enable DKIM signing.
-
highMonitor lookalike domains
35 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. 2 of those serve no website at all but can already receive mail, so a reply sent to them would be delivered although nothing is visible in a browser. With no website there is nothing to inspect, so watch for DNS or web changes rather than treating them as harmless. Monitor them and consider defensive registrations.
-
mediumReview the public subdomain footprint
50 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.
Sources: Ransomware.live · Have I Been Pwned (CC BY 4.0) · Shodan InternetDB · CISA KEV catalog · NVD · FIRST EPSS · CVSS-BT
This product uses the NVD API but is not endorsed or certified by the NVD.
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.