88 tools
Domain and IP research tools help investigators map the infrastructure behind a website. They surface registration details, DNS records, hosting providers, historical ownership, related subdomains, SSL certificates, and the network ranges an address belongs to. Analysts use them to connect a suspicious site to other properties, spot shared infrastructure across a fraud campaign, or verify who really operates a service. Marketing-focused tools in the same space add backlink profiles, traffic estimates, and keyword data that double as investigative signals.
When choosing a tool, weigh how current its data is, whether it keeps historical WHOIS and passive DNS records, and how it handles privacy-protected registrations. Free lookups are fine for quick checks, but deeper pivots often need paid API access or bulk export. Remember that WHOIS and DNS data are public, yet correlating them into a profile of an individual can carry legal and ethical weight, so document your sources and stay within the terms of each service. Pair these with DNS tools for a fuller picture.
The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
A tool for backlink research, organic traffic research, keyword research, content marketing & more.
Search for Azure Tenant using its domain name or its ID
The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
is a website that will help you find out all the technologies used to build a particular websites.
A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
is a website that will help you discover hosts related to a specific domain.
Whois lookup and domain/ip historical data.
A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
Threat Intelligence API that detects if a IP address is associated with a VPN, Proxy, TOR or Bots.
FullHunt is an OSINT tool focused on identifying and protecting internet-exposed assets.
is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
Online service for detailed and free analysis of suspicious files and URLs.
Pprovides IP geolocation and intelligence.
is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
IPLocation.io allows you to check the location of an IP for free
is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
IP address toolset.
Is a free platform offering network diagnostic tools (ping, traceroute, MTR, DNS, WHOIS, HTTP, etc.) tailored for ISPs and infrastructure professionals.
Find out who links to your website.
Threat analysis service for URLs, files, certificates, domains, and suspicious hashes.
is an online database that will provide you a report with detail information about a particular website and the history associated with it.
uses advanced search operators (Google Dorks) to find juicy information about target websites.
is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
Fast subdomain finder with multiple search modes and the most extensive data sources, offering real-time notifications.
Compare any website traffic statistics & analytics.
Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
URLhaus shares malicious URLs to combat malware and botnet threats
is a free service to scan and analyse websites.
Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
Website and API to search current and historical DNS records for free
Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
is a website that gives you a free and comprehensive report about a specific website.
All-in-one tool for viewing website and server meta data.
is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
A Swiss Army knife for scaled intelligence and metadata on IP addresses and domains.
automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architectu
Domain whois information.
is a web service for Whois data contained within ARIN's registration database
Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data
You can find a domain's registrar, creation and expiry dates, name servers, MX and A records, hosting provider, and the IP ranges it uses. Many tools also reveal historical ownership, passive DNS links, shared SSL certificates, and subdomains, letting you connect one site to others run by the same operator.
Yes. WHOIS, DNS, and IP allocation records are public by design, so querying them is legal in most jurisdictions. The caution comes when you combine those records to profile a specific person, which may trigger privacy rules. Respect each service's terms and avoid intrusive use of registrant contact details.
Privacy-protected WHOIS hides the registrant, so pivot instead. Check historical WHOIS snapshots taken before privacy was enabled, look at passive DNS and shared IP or certificate data, and cross-reference analytics IDs, name servers, and reverse-IP neighbors to find other domains the same owner controls.
Search all 1,200+ OSINT tools instantly, or run a target through the investigation console.
Open the OSINT directory →