Whois
Check the information about the registered domain or IP Address. For domain it retrive data including availability, ownership, creation, expiration details, name servers, etc.
Subdomains
Enumerate subdomains of websites using OSINT. Here we use Sublist3r to enumerate subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS.
Technology
Recognizing web technologies content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.
Reputation
To check domain reputation. Return collected information (malicious, good, excellent) from user votes on on threatcrowd.org.
Certificate
Check SSL certificates creating a directed where each domain is a node and the certificate alternative names for that domain's certificate are the edges to other domain nodes using CertGraph tool.
Dnsrecords
Web analytics is the measurement, collection, analysis and reporting of web data for purposes of website optimization.
Social
Web analytics is the measurement, collection, analysis and reporting of web data for purposes of website optimization.
Tools
We used this Open-source intelligence (OSINT) Tools to analyze target. And planning improve this list.
