{"namespace":"osintverse-community","name":"domain-investigation","kind":"guide","summary":"DNS, subdomains, certificates, history and look-alikes of a domain, passively first","latest_version":"1.0.0","categories":["domain-dns","web-archive"],"inputs":["domain"],"outputs":[],"runtime":null,"stars":0,"installs_30d":0,"health":"unknown","health_checked_at":null,"verified":true,"signed":false,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"published","title":"Domain investigation playbook","level":"intermediate","format":"guide","language":"en","needs_update":false,"ref":"osintverse-community/domain-investigation","version":"1.0.0","published_at":1792513127658,"license":"CC-BY-4.0","topics":["domain"],"repo_url":"https://github.com/osintverse-community/domain-investigation","homepage":"https://github.com/osintverse-community/domain-investigation","nav":[{"path":"index.md","title":"Domain investigation playbook","words":146,"dead_links":0},{"path":"01-scope-and-legal.md","title":"Scope and legal","words":123,"dead_links":0},{"path":"02-dns.md","title":"DNS records","words":135,"dead_links":0},{"path":"03-subdomains.md","title":"Subdomains","words":171,"dead_links":0},{"path":"04-history.md","title":"History","words":156,"dead_links":0},{"path":"05-lookalikes.md","title":"Look-alike domains","words":147,"dead_links":0},{"path":"06-live-hosts.md","title":"Live hosts (active)","words":147,"dead_links":0}],"related_tools":[{"ref":"osintverse-community/dns-records","available":true,"install":"ot install osintverse-community/dns-records","namespace":"osintverse-community","name":"dns-records","kind":"tool","summary":"Looks up a domain's A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records","latest_version":"0.1.0","categories":["domain-dns"],"inputs":["domain"],"outputs":["dns_record","domain","ip"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565543258,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/crtsh-subdomains","available":true,"install":"ot install osintverse-community/crtsh-subdomains","namespace":"osintverse-community","name":"crtsh-subdomains","kind":"tool","summary":"Finds a domain's subdomains in Certificate Transparency logs through crt.sh or Cert Spotter","latest_version":"0.1.0","categories":["domain-dns"],"inputs":["domain"],"outputs":["subdomain"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565598714,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/subfinder","available":true,"install":"ot install osintverse-community/subfinder","namespace":"osintverse-community","name":"subfinder","kind":"tool","summary":"Finds a domain's subdomains passively from dozens of public sources","latest_version":"2.17.0","categories":["domain-dns"],"inputs":["domain"],"outputs":["subdomain"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565598714,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/gau","available":true,"install":"ot install osintverse-community/gau","namespace":"osintverse-community","name":"gau","kind":"tool","summary":"Gets every known URL of a domain from the Wayback Machine, Common Crawl, OTX and urlscan","latest_version":"2.2.4","categories":["web-archive","domain-dns"],"inputs":["domain"],"outputs":["url"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565639620,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/waybackpy","available":true,"install":"ot install osintverse-community/waybackpy","namespace":"osintverse-community","name":"waybackpy","kind":"tool","summary":"Finds the oldest or newest Wayback Machine capture of a URL, or every archived URL of a site","latest_version":"3.0.6","categories":["web-archive","utilities"],"inputs":["url"],"outputs":["url"],"runtime":"pipx","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565639620,"verified":true,"signed":false,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/dnstwist","available":true,"install":"ot install osintverse-community/dnstwist","namespace":"osintverse-community","name":"dnstwist","kind":"tool","summary":"Finds registered look-alike domains for phishing, typosquatting and brand impersonation","latest_version":"20250130.0.0","categories":["domain-dns"],"inputs":["domain"],"outputs":["domain","ip"],"runtime":"pipx","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565678640,"verified":true,"signed":false,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/httpx","available":true,"install":"ot install osintverse-community/httpx","namespace":"osintverse-community","name":"httpx","kind":"tool","summary":"Probes a host's web server: status, title, technologies, TLS, CDN and IP","latest_version":"1.12.0","categories":["domain-dns","ip-network"],"inputs":["url"],"outputs":["ip","other","url"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565639620,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":true,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/tlsx","available":true,"install":"ot install osintverse-community/tlsx","namespace":"osintverse-community","name":"tlsx","kind":"tool","summary":"Reads a server's TLS certificate: names it covers, issuer, validity, fingerprints and JARM","latest_version":"1.4.0","categories":["domain-dns","ip-network"],"inputs":["domain"],"outputs":["certificate","domain"],"runtime":"docker","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565598714,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":true,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/tldextract","available":true,"install":"ot install osintverse-community/tldextract","namespace":"osintverse-community","name":"tldextract","kind":"tool","summary":"Splits a URL or hostname into subdomain, registered domain and public suffix","latest_version":"5.4.0","categories":["domain-dns","utilities"],"inputs":["url"],"outputs":["domain","subdomain"],"runtime":"pipx","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565639620,"verified":true,"signed":false,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/checkdmarc","available":true,"install":"ot install osintverse-community/checkdmarc","namespace":"osintverse-community","name":"checkdmarc","kind":"tool","summary":"Checks a domain's SPF, DMARC, MX, BIMI and DNSSEC records and reports problems","latest_version":"6.0.4","categories":["email","domain-dns"],"inputs":["domain"],"outputs":["dns_record","domain"],"runtime":"pipx","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565678640,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":true},{"ref":"osintverse-community/unfurl","available":true,"install":"ot install osintverse-community/unfurl","namespace":"osintverse-community","name":"unfurl","kind":"tool","summary":"Breaks a URL into everything it encodes: timestamps, IDs, search terms, tracking and session data","latest_version":"20261007.0.0","categories":["utilities","web-archive"],"inputs":["url"],"outputs":["other"],"runtime":"pipx","stars":0,"installs_30d":0,"health":"healthy","health_checked_at":1792565639620,"verified":true,"signed":true,"needs_keys":false,"manifest_held_by_registry":false,"community_packaged":true,"source_unavailable":false,"status":"active","ethics":{"touches_target":false,"auth_required":false,"collects_personal_data":false},"egress":false}],"checks":{"needs_update":false,"dead_link_ratio":0,"links":{"checked":13,"dead":2,"missing":0,"malicious":0,"unchecked":0,"skipped":0,"dead_links":[{"page":"02-dns.md","line":9,"url":"https://otinstaller.com/guides/osintverse-community/ip-investigation","status":"dead","http_status":404},{"page":"06-live-hosts.md","line":28,"url":"https://otinstaller.com/guides/osintverse-community/ip-investigation","status":"dead","http_status":404}],"url_scanner":"checked","url_scans":[{"url":"https://otinstaller.com/osintverse-community/checkdmarc","verdict":"unknown","error":"409: Submission unsuccessful: website was recently scanned"}]}},"manifest":{"schema":1,"kind":"guide","name":"domain-investigation","namespace":"osintverse-community","version":"1.0.0","title":"Domain investigation playbook","summary":"DNS, subdomains, certificates, history and look-alikes of a domain, passively first","license":"CC-BY-4.0","homepage":"https://github.com/osintverse-community/domain-investigation","categories":["domain-dns","web-archive"],"level":"intermediate","format":"guide","language":"en","content":{"root":"docs/","nav":["index.md","01-scope-and-legal.md","02-dns.md","03-subdomains.md","04-history.md","05-lookalikes.md","06-live-hosts.md"]},"related_tools":["osintverse-community/dns-records","osintverse-community/crtsh-subdomains","osintverse-community/subfinder","osintverse-community/gau","osintverse-community/waybackpy","osintverse-community/dnstwist","osintverse-community/httpx","osintverse-community/tlsx","osintverse-community/tldextract","osintverse-community/checkdmarc","osintverse-community/unfurl"],"topics":["domain"]}}