[nacheinander]

I'm offering an advanced investigative service to help customers pivot off of technical assets like domain names, IP addresses, ASNs, and anything related to that realm of intel. This include all of the basic reconnaissance techniques you might now, plus much more.

Here are some key features my service offers:

• Advanced reverse proxy (cloudflare, ddosguard) resolution techniques and onion deanonymization
  
• Private historical WHOIS records, rDNS, zones, transfer & more
  
• Lookups on various commercial APIs and private access to ARIN WhoWas
  
• Registrar reach out via sock puppet "threat intelligence" services (bypass whois privacy services)
  
• Comprehensive global DNS analysis, including MX and all other records + vulnerability report (email spoofing, DNS takeover, etc.)
  
• Various fingerprinting techniques (HTTP headers, SSL certs, javascript/css sourcecode, icons, other unique web assets) against public tools as well as private webscrapes
  

Opening price is a $75 flat fee over escrow and results will include everything up to and including the discovery of new Domains or IPs, pricing for further investigation will be negotiable depending on the case. I cannot promise any specific results, but if the data exists, I will find it.