osint.sh
OSINT.sh tool for finding domains and websites hosted on the same IP address.
Directory
Search results
Published directory entries matching your search.
Filters
osint.sh
OSINT.SH is a collection of information gathering tools. It lists tools for finding public cloud buckets, subdomains, DNS history, reverse IP lookups, technology detection, certificate searches, DNS lookups, reverse Google Analytics and AdSense IDs, WHOIS history, reverse WHOIS, reverse domain searches, OCR text extraction, MD5 hash guessing, SSL checking, IP geolocation, and reverse MX and name server records.
one-plus.github.io
OSINT Toolkit Website Information is a collection of tools for researching websites, IP addresses, domains, emails and MAC addresses. It lists lookups including Ping Website, Whois, reverse Whois, network and TLD lookup, IP history and geolocation, MAC vendor lookup, DNS report and header and source code search. The page states that some tools require the IP address, email address, domain name or MAC address of the target.
dnswatch.info
DNSWatch offers DNS lookup and reverse DNS lookup tools with exact performance measuring and DNS server monitoring. It also provides RBL email blacklist lookup and IP location lookup. Paid products include DNS performance monitoring starting at $1 per month, mailserver blacklist monitoring starting at $3.5 per month, and a DNS changetracker starting at $7.9 per month. The site is free to use with ads.
analyzeid.com
AnalyzeID is a reverse lookup tool that searches Google Analytics, Google Adsense, Amazon affiliate, email, IP and other third-party IDs to find other websites owned by the same person. The site lists uses such as researching site owners, checking whether sellers are mass producing sites, and finding money sites. It presents itself as more than a reverse IP tool when owners host sites on different servers.
ip.thc.org
Unlimited Reverse DNS, Subdomain and Reverse CNAME lookups, also provides JSON APIs.
dnslytics.com
DNSlytics is an online investigation tool for viewing information about IP addresses, domain names and providers. It offers DNS lookups, email testing, WHOIS lookups, and reports on AS/BGP, CIDR and TLD data. Premium website access and a premium API provide additional page views, monitors and data.
ipleak.net
IPLeak.net is a diagnostic page that shows the IP addresses, DNS resolvers, WebRTC and torrent address information a visitor's system exposes to websites. It also explains WebRTC and DNS leaks and lists request details such as user agent and headers.
robtex.com
Robtex offers free DNS lookup and network intelligence. It gathers public information about IP numbers, domain names, host names, autonomous systems and routes, indexes it in a database, and provides lookup tools including reverse DNS, Whois and AS macros.
browserleaks.com
BrowserLeaks is a suite of browser-based tools that test browser security and privacy. The tests identify ways websites may reveal a real IP address, collect device information and perform browser fingerprinting. Tools include IP address display, reverse IP lookup, HTTP header, country, ISP and local time checks, plus WebRTC, DNS and IPv6 leak tests. A Features Detection tool lists HTML5 feature support.
github.com
A user-friendly Python toolkit for open source intelligence, providing key features such as image geolocation, social media profiling, email breach checks, domain lookup, metadata extraction, Google dorking, Wayback Machine queries, IP geolocation with blacklist checks, reverse image search, among others.
viewdns.info
ViewDNS.info is a site offering free DNS and IP tools, including Reverse IP Lookup, WHOIS, DNS Records, Subdomain Finder, Port Scanner, IP Location and DNS Propagation Checker. It also provides API documentation for domain, IP and network intelligence, with a Sandbox plan of 250 free trial queries and paid plans from $49 per month for 2,500 monthly queries.
whoismind.com
WhoIsMind offers a free IP address lookup tool that reports an IP address's location, ISP, ASN and domain information. The site also explains reverse IP lookups, which return the hostname or domain associated with an IP address via PTR records, and discusses public, private, static and dynamic IP address types.