Domain, IP & DNS Research

Whois Search

webwhois.verisign.com

Verisign WHOIS lookup for checking domain registration records and registry information.

IP search - Network Entity Reputation Database

nerd.cesnet.cz

The Network Entity Reputation Database IP search is a CESNET page that searches and lists IP addresses with hostname, ASN, country, events, reputation score, threat category, other properties, time added and last activity. It provides links to services including Shodan, Censys, AbuseIPDB, Talos Intelligence Center, Greynoise Visualizer and DShield. Results shown include DShield reports and OTX pulses.

Website search tool

aware-online.com

A custom OSINT tool from Aware Online Academy for investigating a target website. It provides scripts to view historical WHOIS data, check website text and source code on third-party sites, visualise links, map web pages, check Reddit presence, find open FTP ports and find other top level domains.

Censys certificate search for exploring TLS certificates, domains, issuers, and transparency logs.

OSINT.sh certificate search for finding TLS certificates, domains, and certificate history.

Censys IPv4 search for finding exposed hosts, ports, services, and internet infrastructure.

OSINT.sh tool for checking historical DNS records and domain infrastructure changes.

OSINT.sh SSL check for testing whether a host appears vulnerable to Heartbleed.

OSINT.sh IP lookup for checking geolocation, ASN, network, and hosting information.

OSINT.sh online Nmap-style scanner for checking visible ports and network services.

OSINT.sh SSL check for testing whether a host appears vulnerable to POODLE.

OSINT.sh reverse domain lookup for finding related domains and infrastructure links.

OSINT.sh tool for finding websites connected by shared Google AdSense identifiers.

OSINT.sh tool for finding websites connected by shared Google Analytics tracking IDs.

OSINT.sh tool for finding domains and websites hosted on the same IP address.

OSINT.sh tool for finding domains that share the same mail exchanger records.

OSINT.sh tool for discovering subdomains connected to a target domain.

OSINT.sh tool for detecting a website's technology stack, frameworks, and services.