Domain & DNS Intelligence

Attack-surface discovery and domain intelligence platform

Best for: Expanding a scoped domain or organization into public assets, technologies, services, and exposure clues before validation.

Community threat-intelligence search and indicator enrichment

Best for: Enriching domains, IPs, URLs, and indicators with reputation, community threat-intelligence context, and linked observables during triage.

Free web-based DNS and domain lookup tools

Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.

Reverse analytics, DNS, and domain intelligence

Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…

Passive DNS and subdomain reconnaissance

Best for: Use it when a domain is already in scope and the next job is quick passive mapping before…

DNS, email, and blacklist diagnostics

Best for: Use it when a domain or mail server needs quick deliverability, DNS, or blacklist context before deeper infrastructure…

Domain, DNS, WHOIS, and threat intelligence APIs

Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.

Commercial domain intelligence for WHOIS history and DNS pivots

Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.

DNS history and domain intelligence for scoped investigations

Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.

RDAP/WHOIS registration-data checklist for domain leads

Best for: Registrar, registration-date, nameserver, status, and visible contact checks around a domain already in scope.