Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search the OSINT tools directory.
This is the core workspace: search by investigation task, evidence type, access model, pricing, and verification context before you click out.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections stay reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Live interface preview
Sectigo
Free certificate-transparency lookup for domain pivots
Verification: Editorial review
Workflow: Discovery
Pricing: Free
Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.
Editorial
crt.sh
Free certificate-transparency lookup for domain pivots
Editorial
Live interface preview
SecurityTrails
DNS history and domain intelligence for scoped investigations
Verification: Editorial review
Workflow: Enrichment
Pricing: Paid
Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.
Editorial
SecurityTrails
DNS history and domain intelligence for scoped investigations
Editorial
Live interface preview
Censys
Structured search for hosts, services, and certificates
Verification: Editorial review
Workflow: Pivoting
Pricing: Paid
Best for: Certificate-led and host-led infrastructure mapping from a scoped technical clue.
Tested
Censys
Structured search for hosts, services, and certificates
Tested
Live interface preview
Shodan
Public-internet exposure search for hosts and services
Verification: Editorial review
Workflow: Discovery
Pricing: Freemium
Best for: Fast first-pass checks on scoped IPs, hosts, ASNs, organizations, exposed services, ports, banners, and technology fingerprints.
Tested
Shodan
Public-internet exposure search for hosts and services
Tested
Continue the investigation