ATTACK
SURFACE.
A consolidated view of what a domain publishes to the Internet. The passive analysis runs first; authorized active checks come in as modules of the same flow.
SAFE BY DEFAULT //
DNS, Certificate Transparency and HTTPS metadata are queried first. The port section only runs after you confirm authorization and pass Turnstile.
DOMAIN—
PUBLIC IPv40
IPv6—
CT NAMES0
HTTPS—
DNS POSTURE—
01 // DNS
DETAILS →DNS & email posture
Waiting for the analysis.
02 // WEB
DETAILS →HTTPS & headers
Waiting for the analysis.
03 // CT LOGS
DETAILS →Certificate Transparency
CT is historical and passive. A listed hostname may have been removed or be inactive today.
Waiting for the analysis.
04 // ACTIVE TCP
PORT CHECK →Service exposure
ABUSE PROTECTION //
The active check only tests a short list of common ports. No banner grabbing, authentication or exploitation is attempted.