Technical OSINT Fundamentals

DNS and Infrastructure Clues

Connecting to LMS... Progress: in progress

Narration

DNS maps names to services and publishes supporting information. An A record maps a name to an IPv4 address, while an AAAA record maps it to IPv6. A CNAME record aliases one name to another, often revealing a hosted platform or service dependency.

MX records identify mail exchangers. NS records identify authoritative name servers. TXT records carry text used for purposes such as domain verification, email-security policy, and service configuration. A TXT value should be interpreted according to its specific standard and context.

Together, records can describe public service names, mail providers, verification relationships, and third-party dependencies. They can also expose stale configurations or inconsistent ownership that deserves internal review.

Interpret DNS cautiously. Records may be cached, changed, split by resolver location, fronted by a proxy, or delegated to a provider. One destination can serve many customers, and one service can use many addresses. A record is an observed configuration, not automatic proof of who operates the underlying system.

Time matters. Note when the record was observed and whether the source represents current, historical, passive, or authoritative data. Independent sources with different collection paths can increase confidence, but repeated copies of one record are not independent corroboration.

Defensive analysis should reconcile public DNS with approved asset inventories, service owners, and vendor records. The useful outcome is a documented question or remediation item, not an unsupported conclusion based on a single lookup.