Jason Trost jatrost
jatrost
/ Fortune 1000 Trusting Azure Networks.csv
Created
July 6, 2020 13:55
We can make this file beautiful and searchable if this error is corrected: Unclosed quoted field in line 8.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| domain,azure_networks_size,azure_network_labels,includes | |
| edgewell.com,3085,"['Azure ', 'Azure AzureFrontDoor']","['spf6.edgewell.com', 'spf2.edgewell.com', 'spf4.edgewell.com', 'spf3.edgewell.com', 'spf1.edgewell.com', 'spf5.edgewell.com']" | |
| pg.com,32,['Azure '],"['mail.zendesk.com', 'spf.protection.outlook.com', 'spf.messagelabs.com', '_spf.salesforce.com', 'amazonses.com', '_spf.fireeyecloud.com']" | |
| microsoft.com,17,['Azure '],"['_spf1-meo.microsoft.com', 'spf-a.hotmail.com', '_spf-a.microsoft.com', '_spf-c.microsoft.com', '_spf-b.microsoft.com', '_spf-ssg-a.microsoft.com']" | |
| caesars.com,13,['Azure '],"['spf-002ece01.pphosted.com', '_spf.salesforce.com', 'authsmtp.com', 'spf.emailsignatures365.com']" | |
| iff.com,13,['Azure '],"['_spf.salesforce.com', '_netblocks.mimecast.com', 'nw026.com', 'spf.emailsignatures365.com']" | |
| kbhome.com,13,['Azure '],"['h2partner.com', '_spf.q4press.com', 'spf.emailsignatures365.com']" | |
| mutualofamerica.com,13,['Azure '],"['spf.protection.outlook.com', 'auth.msgapp.com', 'spf-00073201.pph |
jatrost
/ Domains with 4 or more Email Security Providers (via SPF).csv
Created
July 6, 2020 02:23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| domain_alexa_rank | domain | num_email_security_providers | email_security_providers | |
|---|---|---|---|---|
| - | mqsadvisors.com | 4 | ZixMail,AppRiver,fusemail,Protonmail | |
| - | primo.com.au | 4 | Mimecast,Mcafee,Symantec,Proofpoint | |
| - | fera.co.uk | 4 | Symantec,Forcepoint,fusemail,Protonmail | |
| 110703.0 | pivotal.io | 4 | Cisco Ironport,Mimecast,Symantec,Proofpoint | |
| - | premiercu.org | 4 | Mimecast,Cisco Ironport,Fortinet,Proofpoint | |
| - | pendletonplace.org | 4 | AppRiver,Mimecast,Mcafee,ZixMail | |
| - | mysolutions.biz | 4 | AppRiver,Reflexion,Can-It Pro,ZixMail | |
| - | tracintermodal.com | 4 | Mimecast,ZixMail,AppRiver,BAE Systems | |
| 220653.0 | pallet-track.co.uk | 4 | the email laundry,hornetsecurity,ZixMail,AppRiver |
jatrost
/ Fortune 100 Email Security Providers Listing (via SPF).csv
Last active
July 6, 2020 02:01
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| domain | email_security_providers | includes | |
|---|---|---|---|
| hcahealthcare.com | - | msgfocus.com,_spf.medicalgps.com,spf_amer.taleo.net,cust-spf.exacttarget.com,jangomail.com | |
| morganstanley.com | - | _spf.morganstanley.neolane.net | |
| cvshealth.com | - | %{d}.4e.spf-protect.agari.com | |
| directv.com | - | spf-a.rnmk.com,spf-a.directv.com,spf-b.directv.com,spf-b.rnmk.com | |
| exxonmobil.com | - | - | |
| pepsico.com | - | spf1.pepsico.com | |
| aa.com | - | spf.aa.com,spf.protection.outlook.com | |
| fanniemae.com | - | fanniemae.com._nspf.vali.email,%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email | |
| verizon.com | - | spf.ecrm.verizon.com,verizonwireless.com |
jatrost
/ Alexa Top 1M Domains Trusting slash-7 or bigger.csv
Created
July 6, 2020 01:19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| domain_alexa_rank | domain | largest_public_network | |
|---|---|---|---|
| 59926 | creativecircle.com | 64.4.22.64/2 | |
| 68649 | uwcu.org | 139.131.76.84/5 | |
| 75404 | gevestor.de | 91.241.72.0/2 | |
| 192594 | calumetphoto.de | 66.50.196.112/6 | |
| 195027 | studioserver.com.br | 107.181.135.0/4 | |
| 242611 | hitadouble.com | 208.67.207.0/0 | |
| 260363 | odakitap.com | 213.155.112.82/3 | |
| 267315 | debeersgroup.com | 10.47.149.168/2 | |
| 325031 | tickeri.com | 208.43.239.136/3 |
jatrost
/ Alexa Top 1M Domains Trusting slash-8 or bigger.csv
Created
July 6, 2020 00:59
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| domain_alexa_rank | domain | largest_public_network | |
|---|---|---|---|
| 156 | uol.com.br | 20.0.0.0/8 | |
| 24938 | bling.com.br | 54.0.0.0/8 | |
| 30426 | pluraleditores.co.ao | 196.0.0.0/8 | |
| 59926 | creativecircle.com | 64.4.22.64/2 | |
| 68649 | uwcu.org | 139.131.76.84/5 | |
| 70525 | blueshieldca.com | 15.0.0.0/8 | |
| 75404 | gevestor.de | 91.241.72.0/2 | |
| 84794 | ifsc.edu.br | 54.0.0.0/8 | |
| 102496 | kanbanize.com | 54.0.0.0/8 |
jatrost
/ Top SPF Includes 2LDs from all top domain lists (via SPF).csv
Created
July 5, 2020 15:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| includes_registered_domains | domain | |
|---|---|---|
| outlook.com | 606741 | |
| google.com | 403872 | |
| mcsv.net | 135641 | |
| websitewelcome.com | 132545 | |
| ovh.com | 83291 | |
| mandrillapp.com | 83021 | |
| mailchannels.net | 78685 | |
| sendgrid.net | 72738 | |
| bluehost.com | 70342 |
jatrost
/ Top SPF Includes 2LDs from Fortune 1000 (via SPF).csv
Created
July 5, 2020 15:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| includes_registered_domains | domain | |
|---|---|---|
| outlook.com | 409 | |
| pphosted.com | 210 | |
| salesforce.com | 93 | |
| mimecast.com | 70 | |
| pardot.com | 56 | |
| sendgrid.net | 54 | |
| messagelabs.com | 53 | |
| mcsv.net | 51 | |
| q4press.com | 48 |
jatrost
/ Top SPF Includes 2LDs from Alexa top1m (via SPF).csv
Created
July 5, 2020 15:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| includes_registered_domains | domain | |
|---|---|---|
| google.com | 48859 | |
| outlook.com | 44033 | |
| mcsv.net | 18254 | |
| mandrillapp.com | 13718 | |
| sendgrid.net | 11144 | |
| amazonses.com | 9777 | |
| mailgun.org | 9530 | |
| zendesk.com | 9225 | |
| websitewelcome.com | 5308 |
jatrost
/ fsu-spf-crawl.log
Created
July 5, 2020 02:11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ echo fsu.edu > fsu.txt | |
| $ python spf_crawler.py fsu.txt | |
| $ python spf_results_parser.py spf-results/fsu-all.json fsu-links.json | |
| $ jq 'select(.domain == "fsu.edu")' fsu-links.json | |
| { | |
| "domain": "fsu.edu", | |
| "includes": [ | |
| "servers.mcsv.net", | |
| "_spf.mlsend.com", | |
| "spf.protection.outlook.com", |
jatrost
/ dig-TXT-fsu-includes.log
Created
July 5, 2020 02:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ dig TXT spf.protection.outlook.com _spf.qualtrics.com spf.blackboardconnect.com servers.mcsv.net _spf.mlsend.com | grep -i v=spf | |
| spf.protection.outlook.com. 600 IN TXT "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/48 include:spfd.protection.outlook.com -all" | |
| _spf.qualtrics.com. 600 IN TXT "v=spf1 ip4:139.60.152.0/22 ip4:162.247.216.0/22 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83/32 ip4:52.222.62.51/32 ip4:52.222.75.85/32 ?all" | |
| spf.blackboardconnect.com. 1800 IN TXT "v=spf1 ip4:34.215.79.96 ip4:34.213.216.156 ip4:34.215.2.68 ip4:52.32.163.183 ip4:34.214.101.49 ip4:34.217.250.63 ip4:52.38.184.84 ip4:52.42.133.179 ip4:208.93.120.0/24 ip4:208.93.122.0/24 -all" | |
| servers.mcsv.net. 600 IN TXT "v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ?all" | |
| _spf.mlsend.com. 300 IN TXT "v=spf1 ip4:92.61.38.0/24 ip4:31.193.196.0/24 ip4:31.193.193.0/24 ip4:195.12.186.0/24 ip4:31.193.199.0/24 ip4:185.79.247 |