If a request from this address showed up in your logs, this page explains exactly what it was.
This host runs an external security posture check operated by Orange Stealth, LLC. It looks at publicly available information about a domain — the same information any visitor's browser and any DNS resolver can see — and reports gaps such as missing email authentication or absent security headers.
For each domain, exactly three things:
It did not scan ports, enumerate paths or files, probe for vulnerabilities, test credentials, submit forms, attempt authentication, or send a single malformed or unusual byte to your server.
Every request was a normal, well-formed one, rate-limited to no more than two per second across all destinations. Nothing was retained about your site beyond the findings described above.
That boundary is deliberate. A check that stays inside public records and ordinary requests is lawful to run without prior arrangement, honest to describe in an email, and should not read as an attack to the person reading the logs. Anything that needs permission belongs in a paid engagement, not in an unsolicited check.
Requests carry this User-Agent:
OrangeStealth-posture-audit/1.0 (+https://scanner.orangestealth.com; passive external check)
Reverse DNS for this address resolves to scanner.orangestealth.com, and
that hostname resolves back to this address. If either direction does not confirm, the
traffic you are looking at is not ours.
Email info@orangestealth.com with the domain or address you want excluded. We will honour it, and we will not ask you to justify the request.
You are also welcome to block this address outright. Nothing here retries, rotates addresses, or works around a block.
Orange Stealth advises small companies that sell to larger, regulated customers — the ones being handed enterprise security questionnaires without an internal security team to answer them. The check produces something specific and independently verifiable rather than a generic claim that gaps probably exist. You can confirm every finding we send you yourself, from your own DNS and your own headers, in a couple of minutes. That is the point of it.
Aggregate statistics from this work are published, and no individual company is identifiable in them. Findings about a specific company go to that company and to no one else.