Tier 1 · scanned 4 hours ago
Termii
termii.com · Texts and sign-in codes
0/1000Overall
Top band921 from our scans · +6 from answers we could check
Disputed yesterday · our ruling due tomorrow
Termii says one finding isn't theirs
"Not ours: that address points at a shared host we left in 2024." It's about jenkins open to the internet on ci.termii.com. We're not sure it's theirs either, so it's already left out of their grade.
The grade
How their 921 is made
External · Fintech weights, as your organisation set · every point accounted for
They’re at the top band. Keeping it is about not slipping.
0921 earned · 79 lost1000
- LeaksStaff logins in breach dumps, files left public16%139/160Old staff logins seen in public breach dumps−21
- IP reputationTheir addresses on spam and malware lists8%59/80Some of their addresses on spam or abuse lists−21
- Open doorsAdmin panels, databases and services open to anyone18%169/180Services that answer but needn't, each minor−11
- Keeping up to dateSoftware with known holes, versions on show16%149/160Older versions on minor hosts, none critical−11
- Breach historyBreaches disclosed in the last five years10%89/100Past breaches, counted for less as they age−11
- DNS and emailSPF, DMARC, DNSSEC, records pointing nowhere10%96/100SPF record allows too many senders−4+4 if fixed
- EncryptionCertificates, protocols, browser protections14%140/140Nothing lost here
- Hacker chatterMentions where attacks are planned8%80/80Nothing lost here