Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search the OSINT tools directory.
This is the core workspace: search by investigation task, evidence type, access model, pricing, and verification context before you click out.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections stay reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Live interface preview
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Freemium, Paid
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
Editorial
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial
Live interface preview
Google Cloud
Multi-source reputation context for indicators
Verification: Editorial review
Workflow: Verification
Pricing: Freemium
Best for: Quick reputation triage for suspicious URLs, domains, IPs, file hashes, and already-public malware or phishing indicators.
Editorial
VirusTotal
Multi-source reputation context for indicators
Editorial
Live interface preview
GreyNoise
Background internet noise intelligence
Verification: Editorial review
Workflow: Monitoring
Pricing: Paid
Best for: Triage of suspicious IPs, scan activity, security alerts, and exposed-service noise where routine internet scanning may explain the…
Sponsored
GreyNoise
Background internet noise intelligence
Sponsored
Continue the investigation