Browse / Semrush

Semrush

See its reports on the map

Attack surface: 5,693 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Semrush

• Misconfiguration11
• Cross-site Scripting7
• Access Control6
• Information Disclosure5
• Insecure Direct Object Reference5
• Authentication5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Cross-origin resource sharing misconfig DuplicateImproper Authentication - Generic · low
   6 votes
2. Email SpoofingDuplicateViolation of Secure Design Principles · medium
   1 votes
3. Ports are not shown in third-party site redirect warning page.Duplicatelow