#OSINT tip: use `related:<domain_name>` query to find alternatives and competitors. Example:

#OSINT tip: virtual dumpster-diving? Pastebin is one of the best places for it. For example let's google site:pastebin.com "OSINT"

#OSINT tip: by looking up the domain WHOIS record you can cross-check the company incorporation date or a product launch.

#OSINT tip: Interested to know if a website is fake? Try to look up back-links openlinkprofiler.org/links/example.…

#OSINT tip: threatcrowd.org is fantastic for network reconnaissance. Right click on the node to pivot.

Because graphs are so cool here's another #OSINT resource: visualsitemapper.com builds an interactive site-map for a given website.

recontool.org OWASP Amass also builds a link graph and visualizes infrastructure exposed on the Internet github.com/OWASP/Amass

Most of the intercontinental Internet traffic is carried through submarine cables: submarinecablemap.com

Continuing the thread of the Internet infrastructure #OSINT. bgp.he.net shows you the routing scheme of autonomous systems (en.wikipedia.org/wiki/Autonomou…).

Internet infra #OSINT. Passive DNS, IP lookups, port scanner and more. spyse.com

#OSINT tip: intelx.io for darknet search without plunging into darknet.

#OSINT tip: tineye.com for reverse image search.

#OSINT tip: use crunchbase.com to get financial insights into the companies.

urlscan.io for inspecting websites behind suspicious links. #OSINT #Tips

#OSINT tip: dnb.com for business data.

#FunFact: The vast majority of the #internet traffic is being carried around through submarine cables. Check out submarinecablemap.com to view an interactive map.

#OSINT tip: right click on Bing maps -> Bird's Eye to look at structures at 45 degree angle.

#OSINT tip: once you in the Bing maps Bird's Eye view you can click the arrows next to the compass to change the viewing angle and get different perspectives.

#OSINT Tip: dnsdumpster.com for #DNS recon, subdomains, hosting, etc.

Monday #OSINT tip: the primary use of crt.sh is certificate info, but it will also give you the history of the domain and what's even more interesting - #subdomains!