What Can Corporate OSINT Reveal? How Duncan Investigations Uses SpiderFoot for Digital Intelligence

The Internet Contains More Information About a Business Than You May Realize

When a corporation is considering a new business relationship, investigating potential fraud, conducting due diligence, researching an executive, or assessing digital risk, the information provided by the subject may only tell part of the story. The open internet can contain an enormous amount of additional information.

At Duncan Investigations Inc., we use Open-Source Intelligence  methodologies and specialized tools such as SpiderFoot to assist with online investigations, corporate intelligence, due diligence, background research and digital intelligence gathering.

SpiderFoot can help investigators collect and correlate publicly available information from numerous sources, creating leads that can then be independently examined and verified.

What Can SpiderFoot Help Identify?

Depending on the target, configuration, available modules and publicly accessible sources, SpiderFoot may identify information relating to several categories.

🌐 Domains & Websites

An investigation involving a company or website may identify:

• Domain names and parent domains

• Domain registration and WHOIS information

• IP and IPv6 addresses

• DNS records

• Name servers

• Hosting providers

• Web servers and technologies

• SSL certificates

• Historical URLs and web content

• Similar or related domains

This information can help investigators understand a company's digital infrastructure and online footprint.

👤 People & Online Accounts

OSINT investigations can also examine publicly available information associated with individuals and online identities, including:

• Names

• Usernames

• Email addresses

• Phone numbers

• Social-media presence

• Accounts on external websites

• Similar or potentially related accounts

• Job titles

• Publicly available addresses

  
  

This can be particularly relevant to executive intelligence, background investigations, fraud investigations and corporate due diligence. Importantly, a matching name, username or email address is not automatically proof that two accounts belong to the same individual. Investigators must evaluate and corroborate the information.

🏢 Companies & Organizations

Corporate investigations can involve much more than locating a company's registration.

OSINT may help identify:

• Company names

• Affiliates

• Corporate relationships

• Legal Entity Identifiers

• Business-related domains

• Digital infrastructure

• Public code repositories

• Software and technologies associated with an organization

Connecting these pieces can help investigators develop a broader understanding of an organization's publicly visible corporate and digital footprint.

🔐 Security & Digital Exposure

Depending on the investigation and available sources, SpiderFoot can also identify information relating to security exposure, such as:

• Compromised email addresses

• Compromised credentials or password-related information where lawfully available

• Malicious IP addresses and domains

• Blacklisted IP addresses

• Vulnerabilities and CVEs

• Open TCP/UDP ports

• Operating systems

• VPN and proxy hosts

• TOR exit nodes

This information can be particularly relevant when assessing digital exposure, corporate security concerns or potential investigative leads.

Any sensitive information encountered during an investigation must be handled appropriately and within applicable legal and professional requirements.

💰 Cryptocurrency Intelligence

Digital investigations increasingly involve cryptocurrency. Depending on the target and available information, SpiderFoot may assist in identifying:

• Bitcoin addresses

• Bitcoin-related information

• Ethereum addresses

• Ethereum-related information

Cryptocurrency identifiers can potentially become another investigative lead when examining fraud, financial investigations or other matters involving publicly visible blockchain activity.

📍 Infrastructure & Location Intelligence

Digital infrastructure can reveal additional connections.

SpiderFoot may identify information such as:

• Physical locations and coordinates where publicly available

• Telecommunications providers

• Netblocks

• Network ownership

• BGP information

• Nearby Wi-Fi access points

• Cloud storage resources

• Co-hosted websites

  
  

This information can help investigators understand how websites, servers, networks and other digital assets may be connected.

📂 Digital Evidence & Web Intelligence

The web also contains historical and technical information that can become valuable investigative leads.

Depending on the target, SpiderFoot may identify:

• Interesting files

• Metadata

• Web content

• Search-engine indexed information

• Historical web pages

• Publicly exposed files

• HTTP headers

• Cookies

• Linked URLs

• Web analytics

• Publicly visible Wikipedia activity

Sometimes information that has disappeared from a company's current website may still exist elsewhere through historical sources or previously indexed content.

How Can Corporations Benefit?

Corporate OSINT can support a variety of legitimate investigative objectives, including:

Corporate Due Diligence

• Researching prospective business partners, vendors, contractors, investors or acquisition targets.

Executive Intelligence

• Conducting research relating to executives, directors and other key individuals.

Fraud Investigations

• Following digital leads associated with suspected fraudulent activity.

  
  

Business Intelligence

• Developing a clearer picture of organizations, industries, competitors and digital relationships.

Corporate Risk Assessment

• Identifying publicly available information that may represent a potential reputational, operational or digital risk.

  
  

Background Investigations

• Adding digital intelligence to traditional background research.

  
  

Litigation Support

• Identifying publicly available information and historical digital evidence relevant to an investigation.

Investigate the risk before you take the risk.