Check the information about the registered domain or IP Address. For domain it retrive data including availability, ownership, creation, expiration details, name servers, etc.
Enumerate subdomains of websites using OSINT. Here we use Sublist3r to enumerate subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS.
To check domain reputation. Return collected information (malicious, good, excellent) from user votes on on threatcrowd.org.
Check SSL certificates creating a directed where each domain is a node and the certificate alternative names for that domain's certificate are the edges to other domain nodes using CertGraph tool.
Web analytics is the measurement, collection, analysis and reporting of web data for purposes of website optimization.
We used this Open-source intelligence (OSINT) Tools to analyze target. And planning improve this list.