Research path

DNS / Domain Data

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

34 mapped profiles No pay-to-rank ordering

How to use this path

  • Start broad here, then narrow in the directory filters.
  • Open profiles for limits, pricing, and verification notes.
  • Use collections when you need a workflow stack, not one tool.

Tool profile

BinaryEdge

Internet scanning and risk intelligence

WorkflowEnrichment AccessPaid
Editorial
Open profile

Tool profile

ViewDNS.info

Free web-based DNS and domain lookup tools

WorkflowDiscovery, Enrichment AccessFreemium
Editorial
Open profile

Tool profile

DNSlytics

Reverse analytics, DNS, and domain intelligence

WorkflowEnrichment, Pivoting AccessFreemium
Editorial
Open profile

Tool profile

ZoomEye

Internet asset search and exposure intelligence

WorkflowDiscovery AccessFreemium
Editorial
Open profile

Tool profile

ONYPHE

Cyber defense search engine and attack-surface data

WorkflowEnrichment AccessFreemium
Editorial
Open profile
DNSDumpster official-page screenshot

Official-page screenshot

DNSDumpster

Source checked 2026-05-07

Passive DNS and subdomain reconnaissance

Verification: Verification status not listed Workflow: Discovery, Pivoting Pricing: Freemium

Best for: Use it when a domain is already in scope and the next job is quick passive mapping before…

Editorial

Tool profile

DNSDumpster

Passive DNS and subdomain reconnaissance

WorkflowDiscovery, Pivoting AccessFreemium
Editorial
Open profile
MXToolbox official-page screenshot

Official-page screenshot

MXToolbox

Source checked 2026-05-07

DNS, email, and blacklist diagnostics

Verification: Verification status not listed Workflow: Enrichment, Verification Pricing: Freemium

Best for: Use it when a domain or mail server needs quick deliverability, DNS, or blacklist context before deeper infrastructure…

Editorial

Tool profile

MXToolbox

DNS, email, and blacklist diagnostics

WorkflowEnrichment, Verification AccessFreemium
Editorial
Open profile

Tool profile

WhoisXML API

Domain, DNS, WHOIS, and threat intelligence APIs

WorkflowEnrichment, Pivoting AccessFreemium
Editorial
Open profile

Tool profile

Mitaka

Browser extension for quick IOC and threat-intelligence pivots

WorkflowEnrichment, Pivoting AccessFree
Editorial
Open profile

Tool profile

theHarvester

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Tool profile

DomainTools

Commercial domain intelligence for WHOIS history and DNS pivots

WorkflowEnrichment, Pivoting AccessFreemium, Paid
Editorial
Open profile

Tool profile

Recon-ng

Open-source modular reconnaissance framework for technical OSINT

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Editorial proof card

Microsoft / RiskIQ

Source checked 2026-05-27

Legacy PassiveTotal context and Microsoft threat intelligence

Verification: Verification status not listed Workflow: Pivoting Pricing: Enterprise

Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.

Editorial

Tool profile

RiskIQ PassiveTotal

Legacy PassiveTotal context and Microsoft threat intelligence

WorkflowPivoting AccessEnterprise
Editorial
Open profile

Tool profile

SecurityTrails

DNS history and domain intelligence for scoped investigations

WorkflowEnrichment AccessPaid
Editorial
Open profile
crt.sh official-page screenshot

Official-page screenshot

Sectigo

Source checked 2026-05-27

Free certificate-transparency lookup for domain pivots

Verification: Verification status not listed Workflow: Discovery Pricing: Free

Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.

Editorial

Tool profile

crt.sh

Free certificate-transparency lookup for domain pivots

WorkflowDiscovery AccessFree
Editorial
Open profile
WHOIS Lookup Workflow official-page screenshot

Official-page screenshot

ICANN Lookup / RDAP workflow

Source checked 2026-05-27

RDAP/WHOIS registration-data checklist for domain leads

Verification: Verification status not listed Workflow: Verification Pricing: Free

Best for: Current RDAP registration-data checks around a scoped domain, IP network, or ASN, including registrar, registration-date, nameserver, status, and…

Editorial

Tool profile

WHOIS Lookup Workflow

RDAP/WHOIS registration-data checklist for domain leads

WorkflowVerification AccessFree
Editorial
Open profile