Research path
Domain & DNS Intelligence
A focused view of OSINT4ALL tool profiles mapped to this investigation path.
How to use this path
- Start broad here, then narrow in the directory filters.
- Open profiles for limits, pricing, and verification notes.
- Use collections when you need a workflow stack, not one tool.
Official-page screenshot
Pulsedive
Community threat-intelligence search and indicator enrichment
Best for: Enriching domains, IPs, URLs, and indicators with reputation, community threat-intelligence context, and linked observables during triage.
Pulsedive
Community threat-intelligence search and indicator enrichment
Official-page screenshot
ViewDNS.info
Free web-based DNS and domain lookup tools
Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.
ViewDNS.info
Free web-based DNS and domain lookup tools
Official-page screenshot
DNSlytics
Reverse analytics, DNS, and domain intelligence
Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…
DNSlytics
Reverse analytics, DNS, and domain intelligence
Official-page screenshot
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Repository screenshot
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Official-page screenshot
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial proof card
Microsoft / RiskIQ
Legacy PassiveTotal context and Microsoft threat intelligence
Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.
RiskIQ PassiveTotal
Legacy PassiveTotal context and Microsoft threat intelligence
Official-page screenshot
SecurityTrails / Recorded Future
DNS history and domain intelligence for scoped investigations
Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.
SecurityTrails
DNS history and domain intelligence for scoped investigations
Official-page screenshot
Sectigo
Free certificate-transparency lookup for domain pivots
Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.
crt.sh
Free certificate-transparency lookup for domain pivots
