ForenShield Lab · OSINT Lab
Follow the leads starting from a single domain
A fictional domain has been reported to you. Query open sources, follow each lead and build the intelligence graph that reveals who is behind it.
- ≈ 12 min
- No account
- Fictional data
Outline
What you will do
Explore the DNS
Name servers, mail, TXT records: the domain reveals itself.
Discover the subdomains
Certificate logs reveal forgotten names.
Identify the technologies
Headers and fingerprints show what runs behind it.
Link the domains
A shared identifier is sometimes enough to connect two sites.
Conclude
Answer the investigation questions from your graph.
Key takeaways
What you will learn
- Chain open sources methodically
- Understand the value of certificate logs
- Link domains through shared elements
- Tell an established fact from a mere hypothesis
On real data
Then move on to the real tools
The simulation is for practice. For your own data, use the tools designed for that purpose.
Frequently asked questions
Before you start
Does this investigation query real services?
No. All answers are written in advance on domains reserved for documentation. No request is sent. To query a real domain, use the site’s domain OSINT tool.
Can the same be done legally?
Consulting public sources is common practice, but its use remains regulated, notably by the GDPR as soon as individuals are concerned. Scanning or testing a system without permission is another matter: only act within an authorized scope.
How is the grade calculated?
The leads you explore count, but the accuracy of your conclusions counts most. Some leads are dead ends: recognizing them is part of the exercise.