yalebooks.yale.edu

The Cyber Exposure Score is a published 0–100 formula built only from publicly observable signals. How this is calculated.

Trend: Credential risk down 65 since 2026-10-09 (30 days).

Posture summary

Public attack surface (677 hostnames in Certificate Transparency)

Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.

The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.

Lookalike domains (10 registered of 73 checked)

Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing. The Risk score (0–100) is a published formula weighing mail capability, registration age, spelling, what the homepage shows and phishing-feed hits, reduced when a name looks brand-owned (same registrar/nameservers, a redirect to this domain) or merely parked. How this is calculated.

7 further registered lookalike(s), 5 of them able to receive mail. The full list, with mail capability for each, is part of the complete audit.

Recommendations

• mediumEnable DNSSEC

  DNSSEC signing was not detected for this domain.

• criticalReset credentials seen in infostealer logs

  Public infostealer telemetry associates 77 employee credential set(s) with this domain — passwords captured from infected devices, which bypass password policy and often session-hijack past MFA. The most recent dates from 2026-09-27. Most commonly RedLine. Force a reset for the affected services, invalidate active sessions, and check the devices themselves.

• mediumReview third-party credential exposure

  322 credential set(s) for third-party services used by this domain appear in the same telemetry. Supplier and SaaS accounts are a common lateral path.

• mediumStrengthen password requirements

  60% of the exposed employee passwords analysed rate as weak or very weak. Raise minimum length and screen new passwords against breach lists.

• highMonitor lookalike domains

  5 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.

• mediumReview the public subdomain footprint

  677 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.