Can mail be sent as this domain? SPF, DMARC and DKIM, plus MTA-STS, TLS-RPT, BIMI, CAA and DNSSEC, and who runs their mail.

Is anything in front of the public site? CDN, web application firewall and the security headers the browser is given.

Is the certificate valid, publicly trusted and in date? From the public certificate logs.

Do staff credentials for this domain appear in known breach data, how recently, and with passwords? Reported as could not check until the breach source is connected.

What is open to the internet: ports, remote access, databases and known vulnerabilities. Reported as could not check until the exposure source is connected.

Are near-identical versions of the domain already registered by someone else?

HTTPS enforcement, cookie flags, mixed content, security.txt, version disclosure, and the organisation's own one-line description of itself.

Subdomains from the certificate logs, and any pointing at abandoned cloud services an attacker could claim.

Every fact is decided in code. The AI writes only the advisory prose around them, and every sentence must pass a code check and an independent fact-checker before it is shown. Deep Intel adds a scoped web search for public sightings: job adverts, named tools, incident news, evidence of the adjacent capabilities.