Private digital intelligence bureau Lawful OSINT — Cyber monitoring — Due diligence

Public research resources · FR / EN

Domains and public infrastructure · OSINT

Which public observations clarify a domain without contacting its target ? Practical method, external tools, source log and interpretation limits.

External services · no results hosted here · queries sent only when you click a provider link.

References reviewed · Published

Tablet, keyboard and notebook on a light desk
Context photograph · Mike Murray · Licence

Which public observations clarify a domain without contacting its target ?

  1. Define authorised domains and assets; distinguish index lookup from target interaction.
  2. Compare RDAP registration, DNS, certificates and already published observations.
  3. Record every timestamp and examine subdomain relationships without equating shared IP with common ownership.
  4. Inspect existing analyses first; assess publication and target visits before an external submission.

Keep these fields in the source log

  • Asset and authorised scope
  • Source, observation type and timestamp
  • Observed relationship and remaining hypotheses

What the method cannot establish alone

IIS performs no scan. At a third party, submitting a URL may trigger a visit and publication; never transmit tokens, private access or confidential files.

External tools for this pathway

Editorial selection of external services and resources, described using their portals or documentation. References reviewed on 3 October 2026; availability, prices, quotas and interface languages can change. Subscriptions and paid features were not tested.

7 catalogue entries

Domains and public infrastructure

ICANN Lookup · RDAP ↗

International · Public entry point

Consult public domain registration data.

Limit: Registrants may be redacted; a registrar or technical contact is not the website author.

Publisher reference ↗

Domains and public infrastructure

crt.sh ↗

International · Public entry point

Find domain names in certificates published in CT logs.

Limit: A certificate may be expired or unused; it does not establish current control.

Publisher reference ↗

Domains and public infrastructure

Google Public DNS ↗

International · Public entry point

Inspect public DNS records with the requested record type.

Limit: Resolution, cache and date matter; a shared IP does not establish a relationship between customers.

Publisher reference ↗

Domains and public infrastructure

Shodan ↗

International · Access / quotas vary

Inspect indexed observations of Internet-facing assets and services.

Limit: Keep research within authorised scope; an old observation is not a current scan.

Publisher reference ↗

Domains and public infrastructure

Censys ↗

International · Access / quotas vary

Access an Internet infrastructure and certificate observation platform.

Limit: Access, platform and quotas evolve; confirm each observation timestamp.

Publisher reference ↗

Domains and public infrastructure

urlscan.io ↗

International · Access / quotas vary

Search existing URL analyses and inspect their requests and screenshots.

Limit: A new submission may become public and visit the target; avoid private URLs and tokens.

Publisher reference ↗

Domains and public infrastructure

VirusTotal ↗

International · Access / quotas vary

Inspect context for a domain, URL or known file hash.

Limit: Do not submit confidential files; verdicts may differ or be outdated.

Publisher reference ↗

These downloads contain tool descriptions and links, not provider search results. Retain limitations, references and review dates when reusing the catalogue.

Questions about tools and external searches

Where are search results displayed?

On the selected provider’s website, in a new tab. IIS does not retrieve, host or display investigation results. Directory filters only filter the editorial catalogue.

Is the typed query stored?

The launchpad builds links inside your browser, without sending the query to IIS or storing it in browser storage. Clicking a prepared link sends the query to the named provider, under its own rules.

Are all tools free and available in every language?

No. Access may require an account, subscription, software or quota. The catalogue is available in French and English; providers set their interface languages, coverage and conditions.

Does no result prove that a fact is false?

No. Index coverage, spelling, language, access limits and capture dates can explain a missing result. Record what was searched and what remains unknown.