OSINT Domain & Infrastructure Analysis 2

Question 1

Which DNS record type maps a domain name to an IPv6 address?

Accepted Answer

AAAA

Answer

The AAAA record (quad-A) maps a hostname to a 128-bit IPv6 address.

Question 2

An OSINT analyst discovers that several unrelated domains share the same Google Analytics tracking ID (UA-XXXXXX). What does this most likely indicate?

Accepted Answer

The sites are likely operated by the same person or organization

Answer

Identical Google Analytics IDs across domains strongly suggest a common owner or operator, a classic pivot technique in domain OSINT.

Question 3

What is the primary purpose of the ARIN (American Registry for Internet Numbers) WHOIS database in an OSINT investigation?

Accepted Answer

To find ASN and IP address block ownership in the ARIN region

Answer

ARIN's WHOIS service provides registration data for IP address blocks and Autonomous System Numbers in North America.

Question 4

Which tool is purpose-built to perform reverse IP lookups and find all domains hosted on a given IP address?

Accepted Answer

HackerTarget Reverse IP API

Answer

HackerTarget's Reverse IP API (and similar services like ViewDNS.info) return all domains sharing an IP, a key technique for infrastructure pivoting.

Question 5

A Certificate Transparency (CT) log search reveals a wildcard certificate for *.example.com issued 30 days ago. What is the most actionable OSINT implication?

Accepted Answer

New subdomains may have been launched recently, worth enumerating

Answer

A recently issued wildcard certificate signals infrastructure expansion; analysts should enumerate subdomains to discover new attack surface or services.

(OSINT) Open Source Intelligence Certification Practice Test

(OSINT) Open Source Intelligence Certification Practice Test

OSINT Domain & Infrastructure Analysis 2