Search the OSINT tools directory.

Domain, DNS, WHOIS, and threat intelligence APIs

Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.

Browser extension for quick IOC and threat-intelligence pivots

Best for: Pivoting from domains, IPs, URLs, hashes, and CVEs into reputation and threat-intelligence sources during triage.

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.

Open-source network mapper for authorized exposure and service discovery

Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.

Commercial domain intelligence for WHOIS history and DNS pivots

Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.

Open-source document metadata analysis for OSINT and exposure review

Best for: Inspecting public document metadata for usernames, software clues, paths, and organization context during authorized research.

Open-source modular reconnaissance framework for technical OSINT

Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.