OSINT.sh online Nmap-style scanner for checking visible ports and network services.
Directory
Search results
Published directory entries matching your search.
OSINT search engine for exposed assets, IPs, domains, certificates, and network data.
Passive OSINT reconnaissance framework in Rust: subdomains, DNS, ASN, certificate transparency history, GitHub dorking, tech fingerprinting, emails an
OSINT.sh SSL check for testing whether a host appears vulnerable to POODLE.
Web vulnerability search engine for finding reported security issues across websites.
OSINT.sh reverse domain lookup for finding related domains and infrastructure links.
OSINT.sh tool for finding websites connected by shared Google AdSense identifiers.
OSINT.sh tool for finding websites connected by shared Google Analytics tracking IDs.
OSINT.sh tool for finding domains and websites hosted on the same IP address.
OSINT.sh tool for finding domains that share the same mail exchanger records.
API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address,
Internet asset intelligence platform for domains, IPs, certificates, and exposed infrastructure.
OSINT.sh tool for discovering subdomains connected to a target domain.
OSINT.sh tool for detecting a website's technology stack, frameworks, and services.
urlscan is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
ViewDNS.info is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
Technology lookup tool for detecting frameworks, CMS platforms, analytics, and website software.
Aware Online tool for searching websites, domains, indexed pages, and related OSINT clues.
Cyberspace search engine for finding internet-connected assets, devices, and exposed services.
Guide to free and open source privacy tools, safer apps, and alternatives to data-heavy services.
Maps who links to any domain using the open Common Crawl hyperlink graph. Free, no-signup referring-domain and competitor link-footprint lookups for d
Free, no-login IP reputation lookup that aggregates up to 8 risk sources, flags residential vs datacenter, and profiles /24 C-block neighbors. Also of
is a website that gives you a free and comprehensive report about a specific website.