Passive Reconnaissance Report

Project: Passive Reconnaissance Assessment
Author: Gabriel S Passos
Date: 2026-03-25
Target: gabrielpassos.com


This report was generated exclusively using passive reconnaissance techniques. No direct interaction, scanning, probing, or traffic was sent to the target infrastructure. All information was obtained from publicly available sources.


Executive Summary

This document presents the results of a passive reconnaissance assessment, aiming to identify publicly exposed information related to the target that could contribute to its external attack surface.

High-Level Overview

This section is intended for management and non-technical stakeholders.


Scope & Methodology

Scope

Methodology

The assessment relied solely on: - Public registration databases - Certificate transparency logs - Passive DNS datasets - Search engine indexing - Public code repositories - Archived web data


Organizational & Domain Intelligence

Whois Information

Field Value
Domain Name gabrielpassos.com
Registrar HOSTINGER operations, UAB
Creation Date 2026-02-25
Expiration Date 2029-02-25
Registrant Organization None
Registrant Country None
Name Servers NS1.DNS-PARKING.COM, NS2.DNS-PARKING.COM

Observations


Public DNS Intelligence

Known DNS Records (Historical / Passive)

Record Type Observed Value First Seen Last Seen Source
A 104.21.51.76 2021-04-20 2021-04-20 VirusTotal
A 104.24.104.184 2020-05-21 2020-05-21 VirusTotal
A 104.24.105.184 2020-05-21 2020-05-21 VirusTotal
A 172.67.177.65 2020-05-28 2020-05-28 VirusTotal
A 185.199.108.153 2026-02-28 2026-02-28 VirusTotal
A 185.199.109.153 2026-02-28 2026-02-28 VirusTotal
A 185.199.110.153 2026-02-28 2026-02-28 VirusTotal
A 185.199.111.153 2026-02-28 2026-02-28 VirusTotal
A 209.99.40.222 2021-05-21 2021-05-21 VirusTotal
A 216.172.172.54 2020-05-19 2020-05-19 VirusTotal

Records listed here were collected from public DNS repositories and historical datasets.


Subdomain Enumeration (Passive Sources Only)

Identified Subdomains

Subdomain First Seen Last Seen Source Status
autodiscover.gabrielpassos.com 2020-05-19 2021-01-14 crt.sh Inactive
cpanel.gabrielpassos.com 2020-05-19 2021-01-14 crt.sh Inactive
cpcalendars.gabrielpassos.com 2020-05-20 2021-01-14 crt.sh Inactive
cpcontacts.gabrielpassos.com 2020-05-20 2021-01-14 crt.sh Inactive
mail.gabrielpassos.com 2020-05-19 2021-01-14 crt.sh Inactive
webdisk.gabrielpassos.com 2020-05-19 2021-01-14 crt.sh Inactive
webmail.gabrielpassos.com 2020-05-19 2021-01-14 crt.sh Inactive
www.gabrielpassos.com 2020-05-19 2026-05-26 crt.sh Active

Observations


Certificate Transparency Analysis

Certificates Observed

Domain / SAN Issuer First Seen Last Seen
*.gabrielpassos.com Cloudflare Inc ECC CA-3 2020-05-21 2022-04-19
autodiscover.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
cpanel.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
cpcalendars.gabrielpassos.com Let's Encrypt Authority X3 2020-05-20 2021-01-14
cpcontacts.gabrielpassos.com Let's Encrypt Authority X3 2020-05-20 2021-01-14
gabrielpassos.com Cloudflare Inc ECC CA-3 2020-05-21 2022-04-19
gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
gabrielpassos.com R12 2026-02-25 2026-05-26
gabrielpassos.com Sectigo RSA Domain Validation Secure Server CA 2020-05-20 2020-08-18
mail.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
webdisk.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
webmail.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
www.gabrielpassos.com Let's Encrypt Authority X3 2020-05-19 2021-01-14
www.gabrielpassos.com R12 2026-02-25 2026-05-26
www.gabrielpassos.com Sectigo RSA Domain Validation Secure Server CA 2020-05-20 2020-08-18

Key Findings


IP & Infrastructure Attribution

Public IP Ranges Associated

IP / Range ASN Organization Country Status
104.21.51.76 AS13335 Cloudflare, Inc. US Inactive
209.99.40.222 AS23005 SWITCH, LTD US Active
185.199.110.153 AS54113 Fastly, Inc. US Active
216.172.172.54 AS19871 Network Solutions, LLC US Active
172.67.177.65 AS13335 Cloudflare, Inc. US Inactive
185.199.108.153 AS54113 Fastly, Inc. US Active
185.199.111.153 AS54113 Fastly, Inc. US Active
104.24.104.184 Unknown Unknown US Inactive
185.199.109.153 AS54113 Fastly, Inc. US Active
104.24.105.184 Unknown Unknown US Inactive

Observations


OSINT & Public Exposure

Publicly Indexed Assets

Metadata Findings

Total Documents Found: 0

Breakdown:

URL Artifact Information Disclosed
No findings

Risk Assessment (Passive)

Exposure Category Risk Level Notes
Domain Management Low No organization info in WHOIS
Subdomain Naming Low No risky naming patterns
Metadata Exposure Low No documents found
Infrastructure Exposure Low Limited exposure

Overall Risk Exposure Rating: low


Recommendations (Non-Intrusive)


Limitations

This assessment did not validate the live availability or security posture of the identified assets. Findings are based solely on publicly available and historical data.


Appendix A – Passive Data Sources


Appendix B – Artifacts


End of Passive Reconnaissance Report

Appendix C – Public Documents

URL Type Information Disclosed
```