warnerbros.com

15-check dossier · scoreboard above, section details below

Get a pack →

Scanning…

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

resolving mx…

spf

info

Open standalone →

resolving spf…

dmarc

info

Open standalone →

resolving dmarc…

dkim

info

Open standalone →

probing dkim selectors…

tls

info

Open standalone →

fetching tls cert…

redirects

info

Open standalone →

tracing redirects…

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

inspecting web surface…

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.

warnerbros.com

15-check dossier · scoreboard above, section details below

Get a pack →

Mostly compliant · 6 items need attention

Aggregate grade across 15 checks. Auditors typically flag any High-severity finding.

Pass: 9
Warn: 6
Fail: 0

What an auditor would flag first

medium
SPF
~all softfail — receivers may still accept
SOC 2 CC6.7ISO 27001 A.13.2.1
medium
Security headers
6 security header(s) missing
SOC 2 CC6.6ISO 27001 A.14.1.2
low
DMARC
p=quarantine — receivers send to spam
SOC 2 CC6.7ISO 27001 A.13.2.1

Need this as an artifact your auditor can verify?

Your warnerbros.com scan flagged 2 medium and 4 low findings. A signed pack covers the apex plus up to 100 CT-discovered subdomains, Ed25519-signed and ISO-timestamped, delivered in 10–30 minutes.

Get a pack →See methodology See a sample$29

Scanning…

15-check summary

DNS recordsA/AAAA records present
MX1 MX record(s) present
SPF~all softfail — receivers may still accept
DMARCp=quarantine — receivers send to spam
DKIM1/6 DKIM selectors valid
TLS certificatecert expires in 45 days
Redirect chainHTTPS served correctly
Security headers6 security header(s) missing
CORSno CORS headers — cross-origin requests blocked by default
Web surfaceHTTPS surface reachable (robots ✓, sitemap ✓, title ✓)
MTA-STSnot applicable: no _mta-sts TXT record
TLS-RPTnot applicable: no TLSRPT record
DNSSECDNSSEC not configured — no DS or DNSKEY records found
WHOISdomain registered until 2030-07-20
Certificate Transparencycheck failed: crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

dns

info

Open standalone →

A/AAAA records present

Why it matters: Without authoritative A or AAAA records on the apex, the domain is unreachable. Missing baseline DNS shows up in vendor reviews as evidence of unmanaged infrastructure (SOC 2 CC6.6).

A: ttl=60 16.145.215.82
ttl=60 44.241.127.208
AAAA: —
NS: ttl=60 ns1-b2.warnerbros.com.
ttl=60 ns2-b2.warnerbros.com.
ttl=60 ns3-b2.warnerbros.com.
ttl=60 ns4-b2.warnerbros.com.
SOA: ttl=60 ns1-b2.warnerbros.com. wbol-hostmaster.warnerbros.com. 2016070800 3600 1800 604800 60
CAA: —
TXT: ttl=300 "0ed1fe018aae5dd81c652344dcb065ca2312180b80"
ttl=300 "72EkDFeGXhc+VgC0bi2v/tnHpJl1GUnzEhlLOzmp+9sDEZkSYHbcmgzLvlVnqTAz6NEY1TBGWUffTB0SZJN3MQ=="
ttl=300 "MS=ms59831392"
ttl=300 "MS=ms59919946"
ttl=300 "MS=ms96313732"
ttl=300 "Sendinblue-code:622c1be246bc8d827b30011e51c82bdf"
ttl=300 "V+uwsvGdUArar7eHH7GbotE5D2kLstpQV8gEUjz1KFs="
ttl=300 "ZOOM_verify_rc0H6SLsRCSDRFw5qXv3Hw"
ttl=300 "_globalsign-domain-verification=6CDdLtVwHrk066tD4Xbq29yhJjTS4_unPsALufFonv"
ttl=300 "_globalsign-domain-verification=ADZUnVKw98p4DPmug8W_KRaEPago48owN9LVPwpg5z"
ttl=300 "_globalsign-domain-verification=Af31nqoVYyI7PGblwhQ6dJqMsF8OBK4_yXd30aBRPW"
ttl=300 "_globalsign-domain-verification=EGEhXwtg05w4nGO-Rxy0CvNpYCh4KoOeX_AS-6rEb4"
ttl=300 "_globalsign-domain-verification=ITMkvaf4p5GuAk7L76Q1TEVy8xgl26mOFWAjAXN_hz"
ttl=300 "_globalsign-domain-verification=Y9D5MQXc5KY3jPX7w5T9Tr3CQVSbvjE6qeB726wKft"
ttl=300 "_globalsign-domain-verification=aPr7i88XPLxj1-MhUNFQGJqsqtpL2_9oDusQ4y-zFF"
ttl=300 "_globalsign-domain-verification=x1QfA3tVurxFx35XbJEbQ_caRemU9O58jHc80Tqs2D"
ttl=300 "adobe-idp-site-verification=b3224707-0342-4a07-8079-73642e727982"
ttl=300 "amazonses:+b7py5LNC8H1iw8OCX39EKNCTLLHSmZciUSSBZPRpOE="
ttl=300 "amazonses:HQmmtAosT1aZ/xZ96CsCg4mh3DAJUIo3rz5o58ac37k="
ttl=300 "amazonses:kM9IhS5dne3/LFzSUma/cRNetVRve3pDt9/pU4gXPfs="
ttl=300 "amazonses:w2U+furZRKJN3ynyffQYTQJeTqASSRHvuzKC/W8J9uM="
ttl=300 "anthropic-domain-verification-sswk6t=vtFElBAyHGlq0l5tBX1uEilAW"
ttl=300 "apple-domain-verification=ja75pc5TZ0c2wTRS"
ttl=300 "apple-domain-verification=l9lPi6DEMaNQYGNY"
ttl=300 "atlassian-domain-verification=joqe6L8dNi+aisGbB1XHQa0pDc53V2l0GQQRUtLEcr2997x0+rtrAA5Zw+UgQw3u"
ttl=300 "cisco-ci-domain-verification=c3ad9d7580211f001c2b386c9c02fd2ad2c93344307fc4a70eebbc9fcb68e0c"
ttl=300 "cloudhealth=2f774d15-daf8-4557-9950-8c87cda17343"
ttl=300 "docker-verification=0ff35b43-9b0d-4381-bf15-25ec5253a8c2"
ttl=300 "docusign=baaef1e3-5860-4821-8f16-7c3d353a1468"
ttl=300 "docusign=e9e2f975-35c7-40c8-9205-78bab5277445"
ttl=300 "extensis-domain-verification=79d2b9bb-7b5f-4ae2-a930-373e740a7fc4"
ttl=300 "facebook-domain-verification=8k2003yb5y3vbi0esj7bae5xlztz13"
ttl=300 "flexera-domain-verification-lztnotcdbwguwgkf"
ttl=300 "globalsign-domain-verification=1D64C4179C09901CA4CA6D5A873C611A"
ttl=300 "globalsign-domain-verification=8A4A4E07A0F0F43CCD1EFE5C4DE585B2"
ttl=300 "google-site-verification=BuC7LlG9McdtJjYoGT7YFBebO2ab0xoL154k4WPfBNY"
ttl=300 "google-site-verification=DWhz0yMAJZCSVpTmE2-LIf-pX5mt_VsVizm5E9ci528"
ttl=300 "google-site-verification=R46z8Qva5MgO_-4PR1y-NDOUlG8wUFs-iOeFR9gxvN8"
ttl=300 "google-site-verification=ZZfH6ahWHlyFeGJgai2ecZle6CAdiKdqrrJeDIB2hts"
ttl=300 "google-site-verification=bgeerL9owPTmHHqbCgvXoXiobYhb_XeYen5-L-G33_E"
ttl=300 "google-site-verification=fryTmCHWRt9FQl9niLBxUU8a-_7hPvXbh9auWJ96VmI"
ttl=300 "miro-verification=1e01f8da769be1241fceefd9abf2c317dcd68323"
ttl=300 "mongodb-site-verification=Ha5xl2z9Plb3g8XipqMOLmzZIKDqhiSg"
ttl=300 "postman-domain-verification=33c1fb762fe64a2edca785b9dd3c03813b8b81357f54e97177b8975566b4420838b42ef6c429020ce8cf8844e612ef3295781699bbe3b5f3bb940e18035cf659"
ttl=300 "postman-domain-verification=aca557d966b0c1c3e4fd781e98abf5f5059f8644dfc034de428d14a834b3f4af10b11ca781e88fd5369c3355f375bd53b03c6f8e01bbf4a00055b9324c300e5e"
ttl=300 "segment-site-verification=yewofkMKLsoHWbvTypmgnEAy17sybBys"
ttl=300 "shopify-verification-code=KbRDGfHKrT5FUhBG0Knelto4hGfl22"
ttl=300 "smartsheet-site-validation=7lJ8CGecMtM4eJfHqvLdTNW2GoqUoPKf"
ttl=300 "smartsheet-site-validation=A3ikdCy5MN_-JUR4IUwVglUCnwHRfM4D"
ttl=300 "smartsheet-site-validation=LVtXGDmXTtP4YqrUFy_FEKK8xB5E0xc4"
ttl=300 "v=spf1 include:warnerbros.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"
ttl=300 "wiz-domain-verification=f169b3087fa1100232f46d958e368d3fe5cf9fec6285c6a12b9d1693b7ca272f"

fetched 2026-05-23T11:41:33.003Z

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

1 MX record(s) present

Why it matters: MX records direct inbound mail. Misconfiguration silently breaks email delivery and lets attackers stand up parallel MX hosts for spoofing campaigns (ISO 27001 A.8.21).

pri=10 warnerbros-com.mail.protection.outlook.com.

fetched 2026-05-23T11:41:32.998Z

mx

info

Open standalone →

resolving mx…

spf

medium

Open standalone →

~all softfail — receivers may still accept

Why it matters: SPF tells receiving servers which hosts may send mail for the domain. Without it, any sender can forge the envelope-from — the primary mechanism behind business-email-compromise (SOC 2 CC6.7).

Recommendations

Move to -all (hardfail) once your mail flow is confirmed — softfail gives no real protection

v=spf1 include:warnerbros.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

v=spf1
include:warnerbros.com._nspf.vali.email
include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email
~all

fetched 2026-05-23T11:41:32.999Z

spf

info

Open standalone →

resolving spf…

dmarc

low

Open standalone →

p=quarantine — receivers send to spam

Why it matters: DMARC binds SPF and DKIM into an enforceable policy (quarantine or reject) and surfaces spoofing attempts via aggregate reports. `p=none` or absent means spoofing succeeds silently (SOC 2 CC6.7).

Recommendations

Upgrade to p=reject once your SPF and DKIM pass rates are consistently high

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email,mailto:postmaster@warnerbros.com; ruf=mailto:Njk0@ruf.vali.email

v=: DMARC1
p=: quarantine
rua=: mailto:dmarc_agg@vali.email,mailto:postmaster@warnerbros.com
ruf=: mailto:Njk0@ruf.vali.email

fetched 2026-05-23T11:41:33.011Z

dmarc

info

Open standalone →

resolving dmarc…

dkim

low

Open standalone →

1/6 DKIM selectors valid

Why it matters: DKIM signs outbound mail so receivers can detect tampering. Missing selectors or rotated-away keys break DMARC alignment and let receivers downgrade trust (ISO 27001 A.8.24).

Recommendations

Check the missing selectors in your DNS provider and re-add any removed records

default:: —
google:: —
k1:: —
selector1:: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12cyBcESQVZSC8lWFHtRQea6WkO6bz17wlJWHMU2Y6d+yD6AePI4KfZ4Jo40tCgEzsommYNrWPzhOTuO++3kS+x9R3ilOEMkZINTqY94tdhHi0jkMvMwMz9IuwIvaqkhAzLnhGndqQ+NG4mrGO4ojfLX9V7LLrb7yNusceWdmEN+KpItpR8wq2GCpxl52rq6wHRBIlW6p+oGai51JAmtvSXCVwL/4gofuDJvLrTSeGgMcINMXFRfb3p0poKp4Bvk0KOkrdjIntxxDRYkHDwpoFQESLkWifQXomTalE56rNs5paSJpNgMRubkY3W4crKcDP+VscVcPyltJPDpwLCYPQIDAQAB;
selector2:: —
mxvault:: —

fetched 2026-05-23T11:41:33.036Z

dkim

info

Open standalone →

probing dkim selectors…

tls

low

Open standalone →

cert expires in 45 days

Why it matters: A valid current TLS certificate is the baseline for data in transit. Expiry, weak chain, or hostname mismatch break HTTPS and fail PCI 4.2.1 / SOC 2 CC6.1.

Recommendations

Schedule certificate renewal — consider enabling auto-renewal

subject cn:: warnerbros.com
issuer:: GlobalSign RSA OV SSL CA 2018 / GlobalSign nv-sa
valid:: Jun 5 15:09:45 2025 GMT → Jul 7 15:09:44 2026 GMT
authorized:: yes
sha256:: DE:0E:F2:19:48:E1:0A:87:BB:A8:1B:D3:40:18:11:B3:DC:31:FE:91:1B:09:EB:B0:77:5A:18:72:02:E2:D9:DE
sans: warnerbros.com
*.twi.com
*.wbtvd.com
*.turner.com
*.wbd.com
wbtvd.com
*.wb.com
*.warnermediagroup.com
*.warnerbros.com
*.warnermedia.com

fetched 2026-05-23T11:41:33.488Z

tls

info

Open standalone →

fetching tls cert…

redirects

info

Open standalone →

HTTPS served correctly

Why it matters: Bare HTTP requests must redirect to HTTPS without dropping the user mid-chain. Plain-text fallback or open redirects fail PCI 4.2.1 and feed phishing chains (SOC 2 CC6.6).

final status: 200 · 3 hops

[301] https://warnerbros.com/
[301] http://www.warnerbros.com/
[200] https://www.warnerbros.com/

fetched 2026-05-23T11:41:33.695Z

redirects

info

Open standalone →

tracing redirects…

headers

medium

Open standalone →

6 security header(s) missing

Why it matters: Security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy — defend against XSS, clickjacking, and downgrade attacks. Absent headers map directly to OWASP ASVS V14 findings (ISO 27001 A.8.23).

Recommendations

Add response header — Strict-Transport-Security: max-age=15552000; includeSubDomains
Add response header — Content-Security-Policy: default-src 'self' (tune per app)
Add response header — X-Frame-Options: DENY (or SAMEORIGIN if framing is intended)
Add response header — X-Content-Type-Options: nosniff
Add response header — Referrer-Policy: strict-origin-when-cross-origin
Add permissions-policy response header

final url: https://www.warnerbros.com/

security headers

strict-transport-security: —
content-security-policy: —
x-frame-options: —
x-content-type-options: —
referrer-policy: —
permissions-policy: —

other headers

age: 285
cache-control: max-age=300
connection: keep-alive
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Sat, 23 May 2026 11:36:49 GMT
etag: W/"943000054ef0f4c414e191dd916a7007"
last-modified: Thu, 21 May 2026 06:17:03 GMT
server: AmazonS3
transfer-encoding: chunked
vary: Accept-Encoding
via: 1.1 42d5fcec36fd38fa462bcec0f5f654fe.cloudfront.net (CloudFront)
x-amz-cf-id: yz5rMaK0VxTub7_FXXSYliGqTpLLZJ5H4uKccWUZaRJA9nTpLob1pg==
x-amz-cf-pop: IAD61-P9
x-amz-server-side-encryption: AES256
x-cache: Hit from cloudfront

fetched 2026-05-23T11:41:33.652Z

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

no CORS headers — cross-origin requests blocked by default

Why it matters: Overly permissive CORS (wildcard with credentials, or reflected origin) lets any origin read authenticated responses from this domain. OWASP A05 misconfiguration territory (NIST AC-4).

origin: https://drwho.me
method: GET
preflight status: 301

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-05-23T11:41:33.569Z

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

HTTPS surface reachable (robots ✓, sitemap ✓, title ✓)

Why it matters: Public files — robots.txt, sitemap.xml, head meta — are what attackers see first during reconnaissance. Misadvertised paths, stale sitemaps, and verbose generators leak more than intended (ISO 27001 A.8.9).

robots.txt

present

<!DOCTYPE html><html lang="en"><head><meta name="generator" content="React Static"/><title data-react-helmet="true">WarnerBros.com | Home of WB Movies, TV, Games, and more!</title><meta data-react-helmet="true" charSet="UTF-8"/><meta data-react-helmet="true" http-equiv="X-UA-Compatible" content="IE=edge"/><meta data-react-helmet="true" name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta data-react-helmet="true" name="description" content="Home of Warner Bros Movies, TV Shows and Video Games including Harry Potter, DC Comics and more!"/><meta data-react-helmet="true" property="og:type" content="website"/><meta data-react-helmet="true" property="og:url" content="https://www.warnerbros.com"/><meta data-react-helmet="true" property="og:image" content="https://www.warnerbros.com/assets/logo.png"/><meta data-react-helmet="true" property="og:image:width" content="1200"/><meta data-react-helmet="true" property="og:image:height" content="600"/><meta data-react-helmet="true" property="og:description" content="Home of Warner Bros Movies, TV Shows and Video Games including Harry Potter, DC Comics and more!"/><meta data-react-helmet="true" name="twitter:card" content="summary_large_image"/><meta data-react-helmet="true" name="twitter:image" content="https://www.warnerbros.com/assets/logo.png"/><meta data-react-helmet="true" property="og:title" content="WarnerBros.com | Home of WB Movies, TV, Games, and more!"/><script type="application/ld+json">{"@context":"https://schema.org","@type":"Organization","name":"Warner Bros. Entertainment Inc.","url":"https://www.warnerbros.com","logo":"https://www.warnerbros.com/assets/logo.png"}</script><link rel="preload" as="script" href="/templates/vendors~__react_static_root__/src/layout/404/404.tsx~__react_static_root__/src/layout/articles/Artic~80d76e5e.c688ba8d.js"/><link rel="preload" as="script" href="/templates/vendors~__react_static_root__/src/layout/404/404.tsx~__react_static_root__/src/layout/articles/Artic~11170e23.8485c52b.js"/><link rel="preload" as="script" href="/templates/vendors~__react_static_root__/src/layout/404/404.tsx~__react_static_root__/src/layout/articles/Artic~dfbe08eb.e74f5e94.js"/><link rel="preload" as="script" href="/templates/vendors~__react_static_root__/src/layout/home/HomeTwoLayout.tsx.9069238c.js"/><link rel="preload" as="script" href="/templates/__react_static_root__/src/layout/home/HomeTwoLayout.tsx.ec2a980c.js"/><link rel="preload" as="script" href="/templates/vendors~main.0ec8487f.js"/><link rel="preload" as="script" href="/main.f58bc3e9.js"/><link data-react-helmet="true" rel="preload" as="image" type="image/png" href="/assets/images/home/wb/logo.png"/><link data-react-helmet="true" rel="preload" as="image" type="image/png" href="/assets/images/home/comedy/logo.png"/><link data-react-helmet="true" rel="preload" as="image" type="image/png" href="/assets/images/home/horror/logo.png"/><link data-react-helmet="true" rel="preload" as="image" type="image/png" href="/assets/images/home/epics/logo.png"/><link data-react-helmet="true" rel="preload" as="image" type="image/png" href="/assets/images/home/comedy/clogo.png"/><link data-react-helmet="true" rel="icon" type="image/x-icon" href="/assets/favicon.ico"/><link data-react-helmet="true" rel="icon" type="image/png" sizes="16x16" href="/assets/favicon-16x16.png"/><link data-react-helmet="true" rel="icon" type="image/png" sizes="32x32" href="/assets/favicon-32x32.png"/><link data-react-helmet="true" rel="apple-touch-icon" sizes="180x180" href="/assets/apple-touch-icon.png"/><link data-react-helmet="true" rel="manifest" href="/assets/manifest.json"/><link data-react-helmet="true" rel="canonical" href="https://www.warnerbros.com"/><link data-react-helmet="true" rel="alternate" href="https://www.warnerbros.com" hrefLang="en-us"/><link data-react-helmet="true" rel="alternate" href="https://www.warnerbros.co.uk" hrefLang="en-gb"/><link data-react-helmet="true" rel="alternate" href="https://www.warnerbroscanada.com/fr" hrefLang="fr-ca"/><link data-react-helmet="true" rel="alternate" href="ht

sitemap.xml

present — 0 url(s)

head

title: WarnerBros.com | Home of WB Movies, TV, Games, and more!
description: Home of Warner Bros Movies, TV Shows and Video Games including Harry Potter, DC Comics and more!

social

og:type: website
og:url: https://www.warnerbros.com
og:image: https://www.warnerbros.com/assets/logo.png
og:image:width: 1200
og:image:height: 600
og:description: Home of Warner Bros Movies, TV Shows and Video Games including Harry Potter, DC Comics and more!
og:title: WarnerBros.com | Home of WB Movies, TV, Games, and more!
twitter:card: summary_large_image
twitter:image: https://www.warnerbros.com/assets/logo.png

fetched 2026-05-23T11:41:33.692Z

web-surface

info

Open standalone →

inspecting web surface…

dnssec

low

Open standalone →

DNSSEC not configured — no DS or DNSKEY records found

Why it matters: DNSSEC cryptographically signs DNS responses, blocking cache-poisoning attacks. US federal civilian agencies are required to enable it under OMB M-22-09 (NIST SC-20).

Recommendations

Enable DNSSEC in your DNS provider's control panel and add the resulting DS record at your registrar

enabled: no
DS records: —
DNSKEY records: —

fetched 2026-05-23T11:41:33.009Z

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

not applicable: no _mta-sts TXT record

Why it matters: MTA-STS forces inbound SMTP to use TLS and refuse downgraded connections. Without it, an in-path attacker can strip TLS and read mail in plaintext (SOC 2 CC6.7).

no _mta-sts TXT record

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

not applicable: no TLSRPT record

Why it matters: TLS-RPT publishes a reporting address for SMTP-TLS failures. Without it, downgrade attacks on inbound mail go unnoticed (SOC 2 CC7.2).

no TLSRPT record

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

info

Open standalone →

domain registered until 2030-07-20

Why it matters: Registrar and expiry tell auditors the domain is owned, current, and not about to lapse. An expired or about-to-expire domain fails business-continuity evidence (SOC 2 A1.2).

registrar: MarkMonitor Inc.
created: 1995-07-21T04:00:00Z
expires: 2030-07-20T04:00:00Z
statuses: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited, clientTransferProhibited https://icann.org/epp#clientTransferProhibited, clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited, serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited, serverTransferProhibited https://icann.org/epp#serverTransferProhibited, serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited

fetched 2026-05-23T11:41:33.527Z

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

check failed: crt.sh: Error: crt.sh http 502; certspotter: Error: certspotter http 429

Why it matters: Every certificate issued for this domain is published in Certificate Transparency logs — including subdomains you may have forgotten. Unknown subdomains in CT are pre-disclosed attack surface (ISO 27001 A.8.16).

crt.sh: Error: crt.sh http 502; certspotter: Error: certspotter http 429

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.