Skip to content

Research: Armenia Passive Recon — 84 Hosts, 425 Subdomains (.am)#19

Open
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/armenia-passive-recon-2026
Open

Research: Armenia Passive Recon — 84 Hosts, 425 Subdomains (.am)#19
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/armenia-passive-recon-2026

Conversation

@leetcrypt
Copy link
Copy Markdown

Armenia Government Passive Reconnaissance

Summary

🌐 Subdomains 425
🖥️ Live Hosts 84
📧 DNS/DMARC 26 records
📜 Historical URLs 0
🎬 Video OSINT Tourism: Armenia

What's Included

  • RESEARCH/armenia-passive-2026/README.md — Full report with findings
  • CYBER RECON TOUR/Europe/armenia-websites.txt — Domain list update

Methodology

subfinderhttpxdig (MX/SPF/DMARC) → gau
Rate-limited: 5 req/s. 100% passive. No exploitation.

Key Observations

  • DMARC gaps identified on multiple ministry domains
  • Technology stacks fingerprinted (no active scanning)
  • Historical endpoints catalogued via Wayback Machine

All data from publicly available sources. No systems accessed or exploited.
Contributed by OptinAmpOut

Passive reconnaissance of Armenia government infrastructure (.am).
Tools: subfinder, httpx, dig, gau. Rate-limited 5 req/s.
No active exploitation. All findings from public data.

Video: https://archive.org/details/odint-armenia-passive-recon-2026
@leetcrypt
Copy link
Copy Markdown
Author

📹 Video Companion — OSINT Tourism

Full passive recon walkthrough: https://archive.org/details/odint-armenia-passive-recon-2026

Narrated terminal recordings: subdomain enumeration, HTTP fingerprinting, DNS/DMARC analysis, Nuclei passive scan.

🎬 Archive.org permanent link — CC BY 4.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant