Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search the OSINT tools directory.
This is the core workspace: search by investigation task, evidence type, access model, pricing, and verification context before you click out.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections stay reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Live interface preview
FullHunt
Attack-surface discovery and domain intelligence platform
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Freemium
Best for: Expanding a scoped domain or organization into public assets, technologies, services, and exposure clues before validation.
Editorial
FullHunt
Attack-surface discovery and domain intelligence platform
Editorial
Live interface preview
Pulsedive
Community threat-intelligence search and indicator enrichment
Verification: Pending Verification
Workflow: Triage, Verification
Pricing: Freemium
Best for: Enriching domains, IPs, URLs, and indicators with reputation, community threat-intelligence context, and linked observables during triage.
Editorial
Pulsedive
Community threat-intelligence search and indicator enrichment
Editorial
Live interface preview
ViewDNS.info
Free web-based DNS and domain lookup tools
Verification: Editorial review
Workflow: Discovery, Enrichment
Pricing: Freemium
Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.
Editorial
ViewDNS.info
Free web-based DNS and domain lookup tools
Editorial
Live interface preview
DNSlytics
Reverse analytics, DNS, and domain intelligence
Verification: Editorial review
Workflow: Enrichment, Pivoting
Pricing: Freemium
Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…
Editorial
DNSlytics
Reverse analytics, DNS, and domain intelligence
Editorial
Live interface preview
Netlas
Internet asset and attack-surface search
Verification: Editorial review
Workflow: Discovery
Pricing: Freemium
Best for: Use it when infrastructure research needs another structured lens on internet-exposed assets and certificates.
Editorial
Netlas.io
Internet asset and attack-surface search
Editorial
Live interface preview
DNSDumpster
Passive DNS and subdomain reconnaissance
Verification: Editorial review
Workflow: Discovery, Pivoting
Pricing: Freemium
Best for: Use it when a domain is already in scope and the next job is quick passive mapping before…
Editorial
DNSDumpster
Passive DNS and subdomain reconnaissance
Editorial
Live interface preview
MXToolbox
DNS, email, and blacklist diagnostics
Verification: Editorial review
Workflow: Enrichment, Verification
Pricing: Freemium
Best for: Use it when a domain or mail server needs quick deliverability, DNS, or blacklist context before deeper infrastructure…
Editorial
MXToolbox
DNS, email, and blacklist diagnostics
Editorial
Live interface preview
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Verification: Editorial review
Workflow: Enrichment, Pivoting
Pricing: Freemium
Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.
Editorial
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Editorial
Live interface preview
ninoseki
Browser extension for quick IOC and threat-intelligence pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Free
Best for: Pivoting from domains, IPs, URLs, hashes, and CVEs into reputation and threat-intelligence sources during triage.
Editorial
Mitaka
Browser extension for quick IOC and threat-intelligence pivots
Editorial
Live interface preview
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
Editorial
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Editorial
Editorial proof card
AbuseIPDB
IP abuse-report and reputation lookup service
Verification: Pending Verification
Workflow: Enrichment, Verification
Pricing: Freemium
Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.
Editorial
AbuseIPDB
IP abuse-report and reputation lookup service
Editorial
Live interface preview
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Verification: Pending Verification
Workflow: Discovery
Pricing: Free
Best for: Finding OSINT tool categories and candidate resources during early workflow planning or training.
Editorial
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Editorial
Live interface preview
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Freemium, Paid
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
Editorial
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial
Live interface preview
ElevenPaths
Open-source document metadata analysis for OSINT and exposure review
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Inspecting public document metadata for usernames, software clues, paths, and organization context during authorized research.
Editorial
FOCA
Open-source document metadata analysis for OSINT and exposure review
Editorial
Live interface preview
lanmaster53
Open-source modular reconnaissance framework for technical OSINT
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.
Editorial
Recon-ng
Open-source modular reconnaissance framework for technical OSINT
Editorial
Continue the investigation