Domains & Websites

13 OSINT tools and guides. Use them lawfully and ethically.

Open with filters and export

WHOIS & RDAP (4)

DomainTools Whois

WorkingPaid

WHOIS records; history requires a paid account.

Open tool

ICANN Lookup (RDAP)

WorkingFree

Official ICANN registration data lookup for domains.

Open tool

ViewDNS.info

WorkingPaid

Reverse IP, reverse WHOIS, DNS records and more.

Open tool

Whoxy

WorkingPaid

WHOIS lookup with historical records and reverse WHOIS.

Open tool

DNS & certificates (4)

crt.sh

WorkingFree

Certificate Transparency search to find subdomains of a domain.

Open tool

DNSDumpster

WorkingFree

Maps a domain's DNS records and hosts.

Open tool

dnstwist

WorkingFree

Finds registered lookalike/typosquat domains of a target domain.

Open tool

SecurityTrails

May be blockedPaidLogin required

Historical DNS and subdomain data.

Open tool

Site analysis (5)

BuiltWith

WorkingPaid

Shows the technology and analytics/ad IDs a site uses.

Open tool

PublicWWW

WorkingPaid

Searches website source code for snippets, analytics IDs, and keywords.

Open tool

urlscan.io

WorkingPaid

Safely loads a URL in a sandbox and records what it contacts.

Open tool

VirusTotal

WorkingPaid

Scans URLs, domains and files against many security engines.

Open tool

Web-Check

WorkingFree

Open-source one-page report on a site's DNS, SSL, headers, servers, and tech.

Open tool