Open Season: Domain Profiling

I hope you enjoyed the last post about CZDS, but I wanted to write another one explicitly related to my experience and how you can profile a domain address.

All of this derived from a tool I wrote called domain-profiler (and the other blog gave me an itch).

So here we go, let’s talk about how you can approach profiling a domain.

What Is a Domain?

To start, let’s just set an example. I’ll use my blog letsautomate.it in this post since it is the most apt to this situation.

Open Season: CZDS

This post was also published in The Thor Collective’s Dispatch.

What up nerds? I was reading this awesome post from LP titled Open Season: Certificate Transparency (I highly recommend you read this too) and it forced me to write this blog about a free and open (mostly) service which can add another layer of context / enrichment to your threat intelligence toolbelt.

Before I get into CZDS, first I want to set the stage of how we can view this data along with the other sources (mentioned in LPs blog and many others).