DNS Records

Let’s lookup the domain ips

dig cyberbotic.io

image.png

let’s try to whois.

whois 172.67.205.143

image.png

now let’s check the other IP

whois 104.21.90.222

image.png

Now let’s enumerate the subdomains

python3 dnscan.py -d cyberbotic.io -w subdomains-100.txt --nocheck

image.png

image.png

as we see we got a mail subdomain.

Now let’s go if there is some weakness in the email protections that can help us while (Phishing Assessment).

python3 spoofy.py  -d cyberbotic.io -o stdout

image.png

As we see almost no protections in the cyberbotic.io domain and it’s possible for Email Spoofing