Domains & DNS
Change research topic
- Analyze IDPaidFinds related websites through shared identifiers and also provides a Username Checker.
- ArgusFreeLocal Python toolkit for domain, network and website research through a shared command line.
- ARIN Whois/RDAPFreeOfficial registry access for IP networks, AS numbers, organisations and network contacts.
- asnFreeLocally installable tool for IP, ASN and BGP research, with traceroute, JSON output and its own API server.
- asnmapFreeA local tool and Go library for finding network ranges from an ASN, IP address, domain or organisation name.
- BuiltWithFreemiumIdentifies website technologies and shows their usage history, as well as websites using matching technologies or keywords.
- CensysFreemiumSearch platform for internet services, IP addresses, domains and publicly observed TLS certificates.
- CentralOpsFreemiumOnline tools for WHOIS and DNS data, domain research and technical email checks.
- CompleteDNSFreemiumHistory of domain nameservers, changes and deletion events since 2002, with reverse lookup and an API.
- crt.shFreePublic search of Certificate Transparency logs by domains, organisations and certificates.
- darkdumpFreeLocal tool for searching the darknet and extracting content from matching pages. Includes a web interface, CLI and file export.
- DataSploitFreeLocal Python framework that combines source queries for domains, email addresses, IP addresses and usernames.
- DeHashedFreemiumSearches collected data breaches by email address, username and other attributes.
- destroylistFreeFree phishing blocklists with domain checks, research reports and an API. Also accessible to AI assistants through MCP.
- DNSdumpsterFreemiumFinds subdomains, DNS records and associated infrastructure from collected internet data.
- DNSReconFreeLocally installable DNS reconnaissance with Python, export features and an optional self-hosted REST API service.
- Domain Research SuiteFreemiumResearches domain registrations, historical WHOIS data and technical connections, and monitors changes.
- domain-diggerFreeOpen-source web application for DNS, WHOIS, IP and certificate information about domains. Can also be self-hosted.
- DomainIQFreemiumDomain and IP research with WHOIS and DNS history, reverse search, monitoring, an API and its own MCP.
- DomainToolsPrice on requestDomain research with historical registration data, passive DNS, infrastructure connections and risk assessments.
- DomainTools Whois LookupFreeShows WHOIS data, registrars, registration dates and technical details for domains or IP addresses.
- FindomainFreeLocal subdomain search with DNS resolution, result import and monitoring for new subdomains.
- flowsintFreeA self-hosted OSINT platform for research workflows and graph visualisation of connections.
OPSEC caution
Extension modules send queries from your own installation to websites and external services. According to the documentation, extensive queries may cause the infrastructure used to be flagged or blocked.
- harpoonFreeA command-line tool for OSINT and threat intelligence. Combines queries to numerous external data sources.
- IBM X-Force ExchangeFreemiumResearches threat information about IP addresses, URLs, domains, malware and vulnerabilities and groups it into collections.
OPSEC caution
In the X-Force community, the information in your user profile is accessible to other participants.
- Intelligence XUnknownA search engine and archive for documents and data findings associated with specific identifiers.
- IntelOwlFreeSelf-hosted analysis platform that examines IP addresses, domains, URLs, file hashes and documents using multiple services.
- IPVoidFreeFree web tools for IP reputation, WHOIS and IP geolocation.
- Leak-LookupFreemiumA data breach search service with a free preview, paid access to individual searches and a separate API.
- LeakCheckFreemiumData breach search with a free preview, paid records, monitoring and an API.
- mitakaFreeA browser extension for quick OSINT and threat intelligence queries from the context menu.
OPSEC caution
Scan requests to HybridAnalysis, urlscan.io and VirusTotal use your own API keys stored in Mitaka.
- Mr.HolmesFreeLocal research suite for usernames, domains, telephone numbers and email addresses, with graphs and maps.
- MxToolboxFreeOnline tools for email headers, DNS data, mail servers and blacklist entries.
- NamechkFreeFree web search for username availability on platforms and domain name availability.
- NexusXplore (OSINT Combine)PaidOSINT platform for searching, connecting and monitoring data from the open web, deep web and darknet.
- OneForAllFreeLocal Python tool for finding subdomains from public sources, DNS checks and HTTP reachability checks.
- Open Threat Exchange (OTX)FreeCollects and links threat information about IP addresses, domains, URLs and files from an open security community.
OPSEC caution
Posts and other activities in the OTX community are associated with your username.
- OpenCTI Community EditionFreeSelf-hosted platform for collecting, linking and searching your own cyber threat intelligence.
- OSINT IndustriesPaidFinds online accounts, digital traces and data breach references matching contact details.
- Pentest-Tools.comFreemiumPlatform for subdomain and infrastructure research, authorised vulnerability scans and penetration tests.
- PulsediveFreemiumThreat data for domains, IP addresses and URLs, with sources, risk indicators, history and an API.
OPSEC caution
Comments, edits and submissions display your username. This association remains even after the account is deleted.
- pwnedOrNotFreeA local Python program for data breach information from Have I Been Pwned and searches of linked pastes.
- Recon-ngFreeA modular Python framework for OSINT research, with workspaces, a database, a web interface and its own API.
OPSEC caution
When a module is loaded, Recon-ng sends a random user identifier, the module name and the program version to its usage analytics. The developer documentation also mentions the IP address. The --no-analytics startup parameter disables this transmission.
- RobtexFreemiumDNS, IP and network research with historical connections, WHOIS, an API and MCP.
- SemrushFreemiumA marketing suite for domain, keyword, backlink and competitor analysis, with API and MCP access.
- sn0intFreeA local OSINT framework with installable modules for infrastructure, accounts, email addresses and telephone numbers.
OPSEC caution
The modules for detecting HTTP and HTTPS services access the systems found directly.
- subfinderFreeLocally installable tool that collects subdomains from public sources. Optional DNS resolution and JSONL output.
- theHarvesterFreeLocally installable OSINT tool for domains, hosts and email addresses, with a command line, its own web interface and a REST API.
- urlscan.ioFreemiumAnalyses web pages in a browser sandbox and searches stored scans by technical characteristics.
- UserSearchFreemiumOSINT platform for people, contact details, images, companies and infrastructure, with 18 search types and an AI assistant.
- ViewDNS.infoFreemiumDNS and domain tools with IP history, reverse WHOIS, an API and its own MCP for AI agents.
- VirusTotalFreemiumSecurity reports and infrastructure relationships for files, hashes, URLs, domains and IP addresses.
- WatcherFreeSelf-hosted platform for cyber news, leak indicators and suspicious domains, with AI summaries.
- web-checkFreeAnalyses websites using DNS, WHOIS, TLS and technology checks. Free in a browser or on your own infrastructure.
- WHO.ISFreemiumWHOIS, RDAP and DNS lookups with domain history, website monitoring, an API and MCP.
- WhoisologyFreemiumWHOIS archive for historical domain registrants and connections between domains.
- WhoxyFreemiumWHOIS research, historical domain registrations and reverse searches by names, companies and email addresses.
- X-osintFreeLocal OSINT menu for telephone, email, IP and vehicle queries, as well as file metadata.
- YouGetSignalFreeFree network tools with reverse IP search for other domains on the same IP address.