Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search OSINT tools by investigation task.
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Official-page screenshot
Pulsedive
Community threat-intelligence search and indicator enrichment
Verification: Pending Verification
Workflow: Triage, Verification
Pricing: Freemium
Best for: Enriching domains, IPs, URLs, and indicators with reputation, community threat-intelligence context, and linked observables during triage.
Editorial
Pulsedive
Community threat-intelligence search and indicator enrichment
Editorial
Official-page screenshot
ViewDNS.info
Free web-based DNS and domain lookup tools
Verification: Editorial review
Workflow: Discovery, Enrichment
Pricing: Freemium
Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.
Editorial
ViewDNS.info
Free web-based DNS and domain lookup tools
Editorial
Official-page screenshot
DNSlytics
Reverse analytics, DNS, and domain intelligence
Verification: Editorial review
Workflow: Enrichment, Pivoting
Pricing: Freemium
Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…
Editorial
DNSlytics
Reverse analytics, DNS, and domain intelligence
Editorial
Official-page screenshot
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Verification: Editorial review
Workflow: Enrichment, Pivoting
Pricing: Freemium
Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.
Editorial
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Editorial
Repository screenshot
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
Editorial
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Editorial
Official-page screenshot
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Freemium, Paid
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
Editorial
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial
Editorial proof card
Microsoft / RiskIQ
Legacy PassiveTotal context and Microsoft threat intelligence
Verification: Editorial review
Workflow: Pivoting
Pricing: Enterprise
Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.
Affiliate
RiskIQ PassiveTotal
Legacy PassiveTotal context and Microsoft threat intelligence
Affiliate
Official-page screenshot
SecurityTrails / Recorded Future
DNS history and domain intelligence for scoped investigations
Verification: Editorial review
Workflow: Enrichment
Pricing: Paid
Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.
Editorial
SecurityTrails
DNS history and domain intelligence for scoped investigations
Editorial
Official-page screenshot
Sectigo
Free certificate-transparency lookup for domain pivots
Verification: Editorial review
Workflow: Discovery
Pricing: Free
Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.
Editorial
crt.sh
Free certificate-transparency lookup for domain pivots
Editorial
Continue the investigation