osint.sh
OSINT.sh reverse domain lookup for finding related domains and infrastructure links.
Directory
Search results
Published directory entries matching your search.
Filters
osint.sh
OSINT.SH is a collection of information gathering tools. It lists tools for finding public cloud buckets, subdomains, DNS history, reverse IP lookups, technology detection, certificate searches, DNS lookups, reverse Google Analytics and AdSense IDs, WHOIS history, reverse WHOIS, reverse domain searches, OCR text extraction, MD5 hash guessing, SSL checking, IP geolocation, and reverse MX and name server records.
osint.sh
Reverse WHOIS lookup for finding domains connected to the same registrant, email, or ownership details.
one-plus.github.io
OSINT Toolkit Website Information is a collection of tools for researching websites, IP addresses, domains, emails and MAC addresses. It lists lookups including Ping Website, Whois, reverse Whois, network and TLD lookup, IP history and geolocation, MAC vendor lookup, DNS report and header and source code search. The page states that some tools require the IP address, email address, domain name or MAC address of the target.
domainwat.ch
Domain monitoring tool for tracking DNS changes, records, and domain activity.
freedns.afraid.org
FreeDNS is a free DNS hosting service that lets users manage their own domain, offering dynamic DNS and static DNS services. Users can also create hosts under other hosted domains with the domain owner's consent. It supports subdomain and domain hosting, backup DNS, reverse IPv6 DNS hosting and URL redirection.
ip.thc.org
Unlimited Reverse DNS, Subdomain and Reverse CNAME lookups, also provides JSON APIs.
osint.sh
OSINT.sh tool for finding websites connected by shared Google AdSense identifiers.
osint.sh
OSINT.sh tool for finding websites connected by shared Google Analytics tracking IDs.
osint.sh
OSINT.sh tool for finding domains and websites hosted on the same IP address.
osint.sh
OSINT.sh tool for finding domains that share the same mail exchanger records.
osint.sh
OSINT.sh tool for checking historical DNS records and domain infrastructure changes.
dnslytics.com
DNSlytics is an online investigation tool for viewing information about IP addresses, domain names and providers. It offers DNS lookups, email testing, WHOIS lookups, and reports on AS/BGP, CIDR and TLD data. Premium website access and a premium API provide additional page views, monitors and data.
census2012.sourceforge.net
Internet Census 2012 is a research paper describing a distributed port scanner built on insecure embedded devices with empty or default credentials. It scanned all IPv4 addresses and includes service probes for common ports, ICMP ping, reverse DNS and SYN scans. Data gathered during the research was released into the public domain.
robtex.com
Robtex offers free DNS lookup and network intelligence. It gathers public information about IP numbers, domain names, host names, autonomous systems and routes, indexes it in a database, and provides lookup tools including reverse DNS, Whois and AS macros.
osint.sh
OSINT.sh tool for discovering subdomains connected to a target domain.
viewdns.info
ViewDNS.info is a site offering free DNS and IP tools, including Reverse IP Lookup, WHOIS, DNS Records, Subdomain Finder, Port Scanner, IP Location and DNS Propagation Checker. It also provides API documentation for domain, IP and network intelligence, with a Sandbox plan of 250 free trial queries and paid plans from $49 per month for 2,500 monthly queries.
whoismind.com
WhoIsMind offers a free IP address lookup tool that reports an IP address's location, ISP, ASN and domain information. The site also explains reverse IP lookups, which return the hostname or domain associated with an IP address via PTR records, and discusses public, private, static and dynamic IP address types.
cosmos-cloud.io
Cosmos Cloud is a self-hosted platform for running apps and services at home or in a business. It includes a reverse proxy, automatic HTTPS, SmartShield, a built-in VPN and backups. It can run as a standalone service or as a Docker container, and documentation covers installation, apps, URLs, users, backups, domains and HTTPS, Constellation VPN and storage.
centralops.net
CentralOps collection of DNS, WHOIS, traceroute, email, and network lookup tools.
dns.he.net
Hurricane Electric Hosted DNS is a free DNS hosting portal for managing forward and reverse DNS records. It supports queries over IPv4 and native IPv6 and offers record types including A, AAAA, ALIAS, CNAME, CAA, MX, NS, TXT, SRV and PTR. Accounts can hold multiple domains, and geographically diverse servers provide the service.
ipleak.net
IPLeak.net is a diagnostic page that shows the IP addresses, DNS resolvers, WebRTC and torrent address information a visitor's system exposes to websites. It also explains WebRTC and DNS leaks and lists request details such as user agent and headers.
github.com
A user-friendly Python toolkit for open source intelligence, providing key features such as image geolocation, social media profiling, email breach checks, domain lookup, metadata extraction, Google dorking, Wayback Machine queries, IP geolocation with blacklist checks, reverse image search, among others.
securitytrails.com
Attack-surface and DNS intelligence platform for domains, subdomains, IPs, and historical records.