Best Domain & IP OSINT Tools (2026) | FaceSeek
The best domain and IP OSINT tools: WHOIS, DNS history, subdomains, certificates, and infrastructure mapping.
Behind every website is infrastructure that tells a story — registration records, DNS history, certificates, and connected hosts. These domain and IP OSINT tools map that infrastructure for research, security, and attribution.
What to look for in domain & ip osint tools
Match the tool to the question: WHOIS for ownership, DNS-history tools for change over time, certificate transparency for subdomains, and device search engines like Shodan for exposed services.
The best domain & ip osint tools
- aa419 Fake Sites Database — The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
- Accuranker — OSINT tool.
- ahrefs — A tool for backlink research, organic traffic research, keyword research, content marketing & more.
- Azure Tenant Resolution by PingCastle — Search for Azure Tenant using its domain name or its ID
- Bgpview.io — The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
- Bing Webmaster Tools — OSINT tool.
- Browserling — Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
- BuiltWith — is a website that will help you find out all the technologies used to build a particular websites.
- Central Ops — OSINT tool.
- Crypto Scam & Crypto Phishing URL Threat Intel Feed — A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
- Dedicated or Not — OSINT tool.
- DNS History — OSINT tool.
Use them together
No single tool sees everything. The fastest workflow is to run one target across several at once — our OSINT tools directory lets you do exactly that from the investigation console, and the Domain and IP Research category page lists every option. Related reading: how to verify an online identity.
Frequently asked questions
How do I investigate a domain?
Start with WHOIS for registration, check DNS and its history, enumerate subdomains via certificate transparency, and scan associated IPs for exposed services. Each layer adds context.
What is Shodan used for?
Shodan indexes internet-connected devices and services, letting you see what's exposed on a given IP or across the internet — useful for security research and attack-surface mapping.
Can I see a website's history?
Yes. DNS-history and web-archive tools show how a domain's records and pages have changed over time, which can reveal past owners and infrastructure.
Try a reverse face search now
Upload a photo and find where a face appears across the public web — free searches every day.
Start a free face search