Skip to main content

Adding and removing subdomains to the Digital Footprint

cor bader
  • Updated

In this article:

    Adding Subdomains

    Adding a subdomain to the digital footprint must meet the following requirements:

    • The subdomain's apex domain must be in the Digital Footprint.
    • The subdomain has an 'A record'.
    • The IP addresses resolved to the subdomain must already be attributed in the Digital Footprint

    The attribution for subdomains works the following way:
    Subdomains ===linked with==> Apex domain ===attributed to==> Scorecard

    A subdomain is not linked to a scorecard, it is linked to its apex domain. It also means that a subdomain can only be present on a scorecard if its apex domain is present also on the scorecard, and be present in the Digital Footprint if its IPs can be attributed to the scorecard.

    Note: SecurityScorecard will only display subdomains on Digital Footprint up to the eTLD+2 (effective top level domain). An example would be: example2.example.com could be shown, but not_valid.example2.example.com would not be shown.

    Removing Subdomains

    Subdomains cannot be force removed from the Digital Footprint. Subdomains are related to their apex domain, so from SecurityScorecard perspective, they belong to the same scorecard. If the apex domain is on the scorecard, all its subdomains will also be present. If the apex is not on the scorecard, all its subdomains will also not be present.

    If the DNS record has been removed for the subdomain, the subdomain will drop off of the Digital Footprint in about 15 days from now.
     

    Related articles