This is phase three of the network scanning lecture. Most likely sfuzzer or osintscan will do the trick, but whats the domain name i need to explore? sunshade.net, sunshade.com, sunshade.co.uk, sunshadecorp.*** how do I find the domain name? This game is somehow about logic, right? Not about mindless trial and error? Because in phase two I ran an SOE attack against the company. So obviously there is a LinkedIn page. There should be a link to the company's website right?. Maybe not the mail server, but the url of the company. And we succeeded in the attack so who is our victim and what is his mail address? So we could read the url of company after the @ -s symbol. - but nothing. I'm sorry if the name was already revealed in lecture Y phase X - i cant remember. At the moment this does not feel like a flow. Its feels very narrowed.