Research path
A focused view of OSINT4ALL tool profiles mapped to this investigation path.
How to use this path
Editorial proof card
AbuseIPDB
IP abuse-report and reputation lookup service
Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.
IP abuse-report and reputation lookup service
Official-page screenshot
EmailRep.io
Email reputation lookup for risk and identity-signal triage
Best for: Adding email reputation context to fraud, breach, contact-vetting, and people-research triage.
Email reputation lookup for risk and identity-signal triage
Official-page screenshot
Mapillary
Street-level imagery platform for geolocation and scene context
Best for: Corroborating roads, storefronts, landmarks, signage, and local scene context in geolocation workflows.
Street-level imagery platform for geolocation and scene context
Official-page screenshot
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
Commercial domain intelligence for WHOIS history and DNS pivots
Official-page screenshot
Wappalyzer
Passive website technology fingerprinting
Best for: Passive website technology fingerprinting, technographic enrichment, and first-pass context around public domains before deeper web or infrastructure research.
Passive website technology fingerprinting
Official-page screenshot
BuiltWith
Website technology and competitor-footprint profiling
Best for: Website technology profiling, historical stack checks, commercial due diligence, competitor research, and domain-context enrichment.
Website technology and competitor-footprint profiling
Official-page screenshot
Hudson Rock
Infostealer exposure intelligence
Best for: Infostealer-exposure checks around company domains, employee accounts, usernames, third-party risk, and defensive credential-risk triage.
Infostealer exposure intelligence
Official-page screenshot
Hunter
Email pattern and verification
Best for: Professional email discovery, domain search, email verification, and company-linked contact checks around an organization already in scope.
Email pattern and verification
Editorial proof card
Microsoft / RiskIQ
Legacy PassiveTotal context and Microsoft threat intelligence
Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.
Legacy PassiveTotal context and Microsoft threat intelligence
Official-page screenshot
Shodan
Public-internet exposure search for hosts and services
Best for: Fast first-pass checks on scoped IPs, hosts, ASNs, organizations, exposed services, ports, banners, screenshots, and technology fingerprints.
Public-internet exposure search for hosts and services
Official-page screenshot
Censys
Censys Platform search for hosts, web properties, and certificates
Best for: Certificate-led, host-led, and web-property infrastructure mapping from a scoped technical clue.
Censys Platform search for hosts, web properties, and certificates
Official-page screenshot
SecurityTrails / Recorded Future
DNS history and domain intelligence for scoped investigations
Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.
DNS history and domain intelligence for scoped investigations
Official-page screenshot
Intelligence X
Sensitive-source and archive search context
Best for: Selector-based search across archived, public-web, leak-adjacent, WHOIS, DNS, dark-web-adjacent, and document datasets when the identifier is already in…
Sensitive-source and archive search context
