Was listening to a talk about passive DNS analysis and made me think of what info could be cleaned from my domain’s DNS records.
Any thoughts on tags which might inadvertently leak data?
TXT records about Cloudflare and Google verification comes to mind.
Yea verification tags for sure
I suppose you could setup an alias for the mail server but that probably breaks DMARC in some non intuitive way
I mostly use one tool for DNS OSINT:
If you want the old-school way, you can fetch WHOIS records.
this is great thanks
I’ve never done deep on DNS analysis but the way the researcher was talking about it made me think I should spend some cycles getting smart on those techniques