Website, Business, and Wireless

PORP · 50 questions

• A paving vendor's homepage looks newly redesigned, but the footer still names an LLC that the state's business search shows as dissolved. How should the OSINT researcher treat that mismatch?
• After a CMS cutover, the city clerk's live site returns 404 for an old marriage-license form, but a web archive still shows the page. What is the sound website-OSINT move?
• Procurement asks for WHOIS on a snow-removal vendor's domain, and the public record shows a privacy proxy instead of a person's name. What should the researcher report?
• A domain registered last week mimics the city's hostname and advertises a "city grants portal" the PIO never launched. What is the appropriate OSINT action?
• Parks procurement reviews a playground-vendor site whose homepage brand does not match the organization named on the public TLS certificate. How should that mismatch be used?
• The city's open-data robots.txt disallows /drafts, but that path still loads in a browser if the URL is known. What is the correct OSINT reading?
• View-source on the housing-application site shows HTML comments that still name a staging hostname. What should the PORP-style researcher do?
• Transit riders are sent to a service-status page on a domain that is not the city's root. What is the website-OSINT task?
• The assessor portal's browser-visible response headers name a common web stack. How should that fact be handled in PORP-scope website OSINT?
• A parks concession vendor's public sitemap.xml still lists staff-bio URLs that the current navigation no longer shows. What does that inventory give the researcher?
• Library IT notices the same unique analytics tracking ID on a vendor's real site and on a look-alike phishing page. What is the OSINT value of that ID?
• An emergency-alert landing page shows one contact phone today and a different number in an older archive capture. What should the researcher produce?
• Public-works DNS still resolves an old ftp. hostname to a parked page. What is the PORP-appropriate finding?
• A "pay your ticket" site uses the city's logo, but public registration data places the registrar in a country the city never uses for official domains. What should the researcher document for the city attorney?
• The convention bureau's English homepage lists different sponsors than its public translated subdomain. What should collection cover?
• A vendor 404 page shown to the permitting desk includes a real internal ticket URL pattern. What is the PORP method?
• A neighborhood blog embeds a public map iframe that appears to be city GIS. What should website OSINT establish?
• A snow-salt vendor's bid name returns no hit in the state's business-entity search. What should business OSINT do next?
• A paving firm's state filing lists different officers than the company's LinkedIn page. How should those sources be weighted?
• Occupancy licensing needs to know whether a food-truck vendor's public health permit is currently active. Which source class is the primary business-OSINT check?
• Economic development forwards "news" hits on a factory prospect that are word-for-word reprints of the company's press release. How should those hits be treated?
• A contractor's brochure claims "20 years serving the city," but public council award agendas only show the firm from two years ago. What should the researcher use as civic history?
• A housing-rehab vendor's website names a bonding company. What is the sound business-OSINT check?
• Port procurement finds the same registered-agent street address on ten otherwise unrelated "local" LLCs bidding work. How should that cluster be reported?
• A nonprofit applying for a city arts grant has a Form 990 on a public nonprofit-research site, and a council member wants the group's private donor roll. What is in-scope for PORP-style collection?
• A city procurement analyst is vetting a “local IT support” vendor that claims every technician lives in the county. Public job ads on the vendor’s careers page and job boards list every opening in another metro. What should the analyst do with that OSINT?
• A stormwater program is vetting a contractor. A public court-index search shows the firm as a defendant on a prior municipal project, and sealed filings are not available. What is the correct OSINT use of that result?
• A parks concession bidder claims year-round full staffing. The firm’s public local-business listing is flagged permanently closed and shows empty hours. What should the OSINT report say?
• Economic development is reviewing a sister-city gift vendor whose brochure names a single domestic factory. Public bill-of-lading-class databases list a different overseas manufacturer as the shipper of record. How should the analyst treat that?
• Fleet management is comparing two “competing” tow-contract bids. Public filings show both companies using the same EIN. What is the due-diligence finding?
• A parks concessionaire’s bid packet highlights five-star reviews. The public review page shows dozens of five-star posts all timestamped within the same afternoon and with near-identical wording. What should the analyst conclude?
• A public-works construction bid is still open. The city’s own business-license portal shows the firm’s license expired last month. What is the OSINT finding?
• An economic-development prospect lists a downtown headquarters on letterhead. Public property and occupancy records show that suite as a virtual-office mail drop shared by dozens of entities. What should the analyst report?
• Due diligence on a “longtime local” vendor finds a live website, but no matching license, no news hits, and no civic filings in the expected public indexes. How should the report characterize that?
• Municipal IT asks for a map of guest-Wi-Fi SSIDs around City Hall. Which PORP-appropriate method should the analyst use?
• A 311 photo shows a sandwich board advertising “free public Wi-Fi” with an SSID that does not match the city’s published guest network name. What is the correct first OSINT step?
• Transit advertises an onboard SSID on every bus. A public wireless map shows that same SSID string at a warehouse miles from any route. What should the analyst treat that as?
• Parks staff ask the OSINT analyst to recover the community-center Wi-Fi passphrase “from open sources.” What is the correct response?
• Public works documents a unique SSID prefix on fleet vehicles. A public wireless map shows that prefix clustered near a known depot. How should the analyst use it?
• A patron complains of a fake hotspot at a library branch. Branches publish “Library-Guest” as the official SSID. What should wireless OSINT start with?
• During a city festival, a vendor hotspot SSID concatenates a payment-brand string with the city name. What should the OSINT product include?
• Open data publishes a current map of city access points. The analyst’s public wardriving-class pull is dated three years earlier and shows APs the live map no longer lists. What should the report do?
• A public wireless dataset tags a housing-authority community-room SSID to a residential tower. A supervisor wants the unit number of a specific tenant from that pin. What is the correct limit?
• The PIO wants OSINT to jam a suspected fake “CityHall-Free-WiFi” SSID on the plaza. What is the PORP-appropriate action?
• A public wireless dataset lists a BSSID near City Hall whose OUI maps to a manufacturer that is not on the city’s AP contract. How should the analyst treat that?
• A traveler tweets a screenshot of a municipal airport-authority guest Wi-Fi prompt. What is the correct wireless-OSINT use of that screenshot?
• Code enforcement configured a “hidden” civic SSID, but a public wardriving-class map still prints the network name. What should the analyst explain?
• A public wireless map shows an SSID that matches the water plant’s internal SCADA network name, which should never be broadcast off-site. What is the correct product?
• A consultant proposes “wireless OSINT” for the library that consists of capturing handshakes and running aircrack-class attacks against guest and staff networks. How should the PORP candidate classify that work?
• A “local” vendor’s public surfaces show a two-week-old domain, a mail-drop headquarters in property records, and a matching SSID observed only in another state. What should the analyst deliver?