Awesome OSINT Domain and IP Research
- aa419 Fake Sites Database https://db.aa419.org/fakebankslist.php - The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
- Accuranker https://www.accuranker.com
- ahrefs https://ahrefs.com - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
- Azure Tenant Resolution by PingCastle https://tenantresolution.pingcastle.com - Search for Azure Tenant using its domain name or its ID
- Bgpview.io https://bgpview.io - The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
- Bing Webmaster Tools http://www.bing.com/toolbox/webmaster
- Browserling https://www.browserling.com - Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
- BuiltWith http://builtwith.com - is a website that will help you find out all the technologies used to build a particular websites.
- Central Ops http://centralops.net
- Crypto Scam & Crypto Phishing URL Threat Intel Feed https://github.com/spmedia/Crypto-Scam-and-Crypto-Phishing-Threat-Intel-Feed - A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
- Dedicated or Not http://dedicatedornot.com
- DNS History https://completedns.com/dns-history/
- DNSDumpster https://dnsdumpster.com - is a website that will help you discover hosts related to a specific domain.
- DNSStuff http://www.dnsstuff.com
- DNSViz http://dnsviz.net
- Domain Crawler http://www.domaincrawler.com
- Domain Dossier http://centralops.net/co/DomainDossier.aspx
- Domain Intelligence https://oti-labs.com/domain-intelligence-api - Aggregate DNS, WHOIS/RDAP, SSL, subdomains (CT logs + DNS bruteforce), and SPF/DMARC posture in one call. Free tier; MIT.
- DomainRecon https://kriztalz.sh/domain-recon/ - Retrieve DNS records, subdomains, SSL certificates and WHOIS / RDAP data for a given website.
- Domain Tools http://whois.domaintools.com - Whois lookup and domain/ip historical data.
- Easy whois https://www.easywhois.com
- Exonera Tor https://exonerator.torproject.org - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
- Focsec https://focsec.com - Threat Intelligence API that detects if a IP address is associated with a VPN, Proxy, TOR or Bots.
- Follow.net http://follow.net
- Fullhunt https://fullhunt.io/ - FullHunt is an OSINT tool focused on identifying and protecting internet-exposed assets.
- GraphyStories http://app.graphystories.com
- Hudson Rock https://www.hudsonrock.com/threat-intelligence-cybercrime-tools - is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
- Hybrid Analysis https://www.hybrid-analysis.com - Online service for detailed and free analysis of suspicious files and URLs.
- HypeStat https://www.hypestat.com
- IP.THC.ORG https://ip.thc.org/ - Unlimited Reverse DNS, Subdomain and Reverse CNAME lookups, also provides JSON APIs.
- Icann Lookup https://lookup.icann.org/en/lookup - The site allows you to look up domain registration information (WHOIS) on the internet
- Infosniper http://www.infosniper.net
- isMalicious https://ismalicious.com - Threat intelligence platform aggregating malicious IP and domain data from multiple security feeds with real-time reputation scoring and threat categorization.
- IntoDNS.ai https://intodns.ai - AI-powered DNS and email security scanner with SPF, DKIM, DMARC, DNSSEC checks and fix suggestions.
- IP 2 Geolocation http://ip2geolocation.com
- IP2Location https://www.ip2location.com/demo - A comprehensive IP intelligence database and API for accurate geolocation, ASN mapping, and VPN/Tor/Proxy detection.
- IP Geolocation API DB-IP https://db-ip.com - Pprovides IP geolocation and intelligence.
- ip2geo.dev https://ip2geo.dev - IP geolocation API providing city, country, timezone, ASN, and currency data from IP addresses.
- IP Checking http://www.ipchecking.com
- IP Location https://www.iplocation.net - is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
- IP Location.io https://iplocation.io - IPLocation.io allows you to check the location of an IP for free
- IPFingerprints http://www.ipfingerprints.com - is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
- IPOK https://ipok.io - Free, no-login IP reputation lookup that aggregates up to 8 risk sources, flags residential vs datacenter, and profiles /24 C-block neighbors. Also offers a CLI and a Chrome extension.
- IPVoid http://www.ipvoid.com - IP address toolset.
- ISP.Tools https://www.isp.tools - Is a free platform offering network diagnostic tools (ping, traceroute, MTR, DNS, WHOIS, HTTP, etc.) tailored for ISPs and infrastructure professionals.
- Kloth http://www.kloth.net/services
- Majestic https://majestic.com - Find out who links to your website.
- Mark Monitor WHOIS https://whois-webform.markmonitor.com/whois/ - Displays domain registration information.
- MaxMind https://www.maxmind.com
- MetaDefender https://metadefender.com - Threat analysis service for URLs, files, certificates, domains, and suspicious hashes.
- Netcraft Site Report http://toolbar.netcraft.com/site_report?url=undefined#last_reboot - is an online database that will provide you a report with detail information about a particular website and the history associated with it.
- OpenLinkProfiler http://www.openlinkprofiler.org/
- PageGlimpse http://www.pageglimpse.com
- Pentest-Tools.com https://pentest-tools.com/information-gathering/google-hacking - uses advanced search operators (Google Dorks) to find juicy information about target websites.
- PhishStats https://phishstats.info/
- Pulsedive https://pulsedive.com
- Qualys SSL Check https://www.ssllabs.com/ssltest/ - SSL Test configuration compliance.
- Quantcast https://www.quantcast.com
- Quick Sprout https://www.quicksprout.com
- RedirectDetective http://redirectdetective.com
- Remote DNS Lookup https://remote.12dt.com
- Robtex https://www.robtex.com - is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
- SameID http://sameid.net
- SecurityTrails https://securitytrails.com/dns-trails - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
- SubDomainRadar.io https://subdomainradar.io - Fast subdomain finder with multiple search modes and the most extensive data sources, offering real-time notifications.
- SEMrush https://www.semrush.com
- SEO Chat Tools http://tools.seochat.com
- SEOTools for Excel http://seotoolsforexcel.com
- Similar Web https://www.similarweb.com - Compare any website traffic statistics & analytics.
- SmallSEOTools http://smallseotools.com
- Squatm3gator https://github.com/david3107/squatm3gator - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
- StatsCrop http://www.statscrop.com
- TinyScan https://www.tiny-scan.com - Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
- TracerouteVisualizer https://kriztalz.sh/traceroute-visualizer/ - An online tool that displays your mtr / traceroute / flyingroutes output on a map for visual analysis.
- urlDNA https://urldna.io/ - Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
- URLhaus https://urlhaus.abuse.ch - URLhaus shares malicious URLs to combat malware and botnet threats
- urlQuery http://urlquery.net
- urlscan https://urlscan.io/ - is a free service to scan and analyse websites.
- URLVoid http://www.urlvoid.com - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
- Validin https://app.validin.com/ - Website and API to search current and historical DNS records for free
- Verisign http://dnssec-debugger.verisignlabs.com
- ViewDNS.info http://viewdns.info
- Virus Total https://www.virustotal.com/ - Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
- w3snoop http://webboar.com.w3snoop.com - is a website that gives you a free and comprehensive report about a specific website.
- Web-Check https://web-check.as93.net/ - All-in-one tool for viewing website and server meta data.
- WebMeUp http://webmeup.com - is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
- Webscore https://garvit835.github.io/WebScore/ - Enter a website URL to check its legitimacy.
- Webscout https://webscout.io/ - A Swiss Army knife for scaled intelligence and metadata on IP addresses and domains.
- Website Informer http://website.informer.com
- WebsiteTechMiner.py https://github.com/cybersader/WebsiteTechMiner-py - automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architecture lookups, etc.
- WhatIsMyIPAddress http://whatismyipaddress.com
- Who.is https://who.is/ - Domain whois information.
- Whois Arin Online https://whois.arin.net - is a web service for Whois data contained within ARIN's registration database
- WhoIsHostingThis http://www.whoishostingthis.com
- WhoisMind http://www.whoismind.com
- Whoisology https://whoisology.com
- WhoIsRequest http://whoisrequest.com
- WiGLE https://wigle.net/ - Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data to the public infoset.
- You Get Signal http://www.yougetsignal.com
Sections
Domain and IP Research
open-source intelligence