Search newly registered phishing domain by keywords; Check it with VirusTotal and Quad9 DNS;
Catalogue d’outils OSINT
259 outils · Domaine / IP / Web
univsersal domain investigation Telegram bot
Framework for gathering information about website
Quick and simple tool for gathering information about domain (http headers, technologies, vulnerabilities etc).
Domain investigation #python tool
Domain investigations toolkit
Nodejs toolkit for OSINT
Google Chrome extension. 56 tools for domain, ip and url investigation in one
type ip-adress once and gather information about it with 13 tools
Well done and well designed port scanner, host info gatherer (include whois).
Free domain research toolkit: WHOIS, RDAP, DNS records, IP WHOIS, nameserver history, SSL certificates, ping/traceroute/MTR diagnostics, expiring domain calendars, and TLD library.
Identify DNS records for target domains, check for zone transfers and conduct subdomain enumeration.
Very quick and simple subdomain enumeration using http://crt.sh.
Experimental phishing kit detection tool. It collects phishy URLs from phishing info feeds and checks each phishy URL whether it enables directory listing and contains a phishing k
Get detailed report about IP or domain: Location SSL Info Headers Domain and host names Whois DNS records Crawl riles Cookies Server Info Redirects Server status TXT Config
An online tool that finds registered domain typosquats and analyzes them for suspicious activity.
Tool to uncover the IP address hidden by Cloudflare (or alternatives): - IP address History, - SSL Certificate Analysis, - Subdomain Scanning
All in one toolkit for subdomain enumeration, extract titles and take screenshots, crawl all the endpoints of the subdomains, search vulnerabilities
A tool to track the history of DNS servers associated with a particular domain. Data since 2002 year for 2.2 billion nameservers.
Free IP geolocation and DNS lookup API. Returns country, city, ISP, timezone for any IP. DNS lookup returns A, AAAA, MX, NS, TXT records. No signup or API key required for basic lo
DNS, WHOIS, DKIM selector discovery, SPF/DMARC and blacklist lookups with plain-English AI explanations. Free, no signup
Domain and website reconnaissance for DNS, WHOIS/RDAP, public subdomains, certificates, technology, reputation and typosquatting.
check A, AAAA, MX, TXT, CNAME and NS records for any domain name in the browser
calculate IPv4 subnet masks, IP ranges, broadcast addresses and host counts; works fully client-side
Open search engine for domain research & OSINT â 44.1M domains indexed, free API tier.
Very(!) fast and simple tool for subdomain bruteforce. It find 53 subdomains, scanned 31160 variations in 31 seconds.
Subdomain enumeration and information gathering tool
An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It's possible to apply bruteforce (flag -b)
Fast and reliable #python script that makes active and/or passive scan to obtain subdomains and search for open ports. Used 21 different #OSINT sources (AlienVault, ThreatCrowd, Ur
Tool to find target infrastructure, files, and apps on the popular cloud providers
TwiSub-domain takeover tool
Very fast #go tool for search subdomains. For example, it fin 111 http://tesla.com subdomains in 0.003 seconds.
A fast, API-first subdomain discovery service with advanced queries.
#python tool for searching and filtering subdomains using different APIs: SecurityTrails, AlienVault, VirusTotal, SpyOnWeb, Crt sh
"Yet another Ransomware gang tracker" (c) Group profiles, recent updates, forums and markets list + some stats. A real treasure cybercrime researchers.
API which allows you to search Whois-database (430M+ domains since 1986) by keyword, company name or owner name
lists of deleted and expired domains (last 7 days)
search for domains for sale
database of domains registered in the last day
An interesting tool for researchers of IT history and data journalists. Just an FREE API that shows how many sites were registered in each domain zone on a given day (since January
search by 230 billion DNS records retrieved from 2008 to the present.
Freely available, user-maintained, database of networks, and the go-to location for interconnection data.
Search whois data by address, city, name, surname, phonenumber