Guide

How to investigate a domain with OSINT evidence.

Domain intelligence is the process of collecting public DNS, ownership, routing, certificate, mail and web-policy signals to understand how a domain is operated.

Investigation coverage

Designed for analysts who need clear signals, not scattered tabs.

Collect DNS evidence

A, AAAA, MX, NS, TXT, CAA and SOA records reveal hosting, email infrastructure, policy decisions and service dependencies.

Map ownership and routing

RDAP, WHOIS, ASN and BGP clues help connect a domain to registrars, networks, cloud providers and country-level infrastructure signals.

Validate trust signals

Certificate history, DNSSEC, SPF, DMARC and HTTP headers help separate mature infrastructure from weak or newly assembled setups.

FAQ

Common questions

What is domain intelligence?

Domain intelligence is public analysis of DNS, ownership, routing, certificate, mail and web security signals around a domain.

Is domain intelligence legal?

Passive review of public records is generally part of normal OSINT, but investigations should remain ethical and authorized.

Start investigation

Use OsintNET to convert public signals into structured evidence.

Pick the module that matches your target and keep each clue connected to its source, confidence and investigation context.