Find DNS Records from a Domain

DomainTools

Enterprise domain and DNS intelligence

Maltego

Visual OSINT link-analysis platform

OWASP Amass

Attack-surface mapping and DNS enumeration

SecurityTrails

DNS history and domain intelligence platform

SpiderFoot

Automated OSINT reconnaissance framework

VirusTotal

Analyze files, URLs, domains, and IPs

urlscan.io

Scan and analyze URLs safely

Altdns

a subdomain permutation tool that generates altered hostnames for DNS brute f

Assetfinder

a command-line tool for finding domains and subdomains related to a target or

Blacklist Checker

Check IPs and domains against 100+ DNS blacklists

CIRCL Passive DNS

CIRCL passive DNS service for researchers

CentralOps

Web toolkit for WHOIS, DNS, and IP network lookups

Cisco Umbrella Investigate

Cisco DNS-resolver threat intel

Cloudflare Radar

Internet trends and DDoS data from Cloudflare

Columbus Project

Fast subdomain enumeration from CT logs and DNS, API-first

CompleteDNS

Historical nameserver records and reverse-NS lookup

DMNS

Domain reconnaissance and DNS lookup tool

DNS History

Free historical DNS record lookup

DNSCrypt-proxy

Encrypted DNS proxy

DNSDumpster

Passive DNS and subdomain reconnaissance

DNSLytics

Reverse-DNS and SSL pivoting platform

DNSRecon

a DNS enumeration script for records, zone transfers, brute force, and cache

DNSValidator

a resolver validation tool used to build reliable DNS resolver lists for reco

DNScan

Python DNS bruteforce and AXFR tester

DNSstuff

Online DNS, reverse-DNS and blocklist lookup suite

Farsight DNSDB

Commercial passive DNS by DomainTools

Fierce

a DNS reconnaissance tool for locating non-contiguous IP space and related ho

Findomain

a cross-platform subdomain enumerator using certificate transparency and publ

Gotator

a permutation generator for creating candidate subdomains during discovery wo

HackerTarget

Free recon tools (DNS, ports, headers, WHOIS)

Hunt.io

Adversary infrastructure tracking service

MXToolbox

a DNS, mail, blacklist, and network diagnostic platform for domain and IP inv

MassDNS

a high-performance DNS stub resolver for large-scale host and subdomain valid

Microsoft Defender Threat Intelligence

Microsoft passive DNS and TI graph

Mnemonic ARGUS

Mnemonic passive DNS and TI platform

Mtr Network Diagnostic

Combined traceroute and ping diagnostic

Multi-RBL Check

Free multi-DNSBL and FCrDNS check for mail servers

Netlas.io

Internet scan search engine for hosts, DNS, certs and WHOIS

OSINT.sh WHOIS History

Historical WHOIS records for a domain name

OpenGraph Intel

Visual OSINT framework that enriches entities via transforms into graphs

PassiveDNS by mnemonic

mnemonic open passive DNS service

RIPE Atlas

Global on-demand measurement network

Rapid7 Project Sonar

Rapid7 free internet-scan datasets

RapidDNS

DNS records, subdomains, and reverse-IP lookup

SecurityTrails Historical DNS

SecurityTrails deep DNS history

Silent Push

Pre-emptive adversary-infra TI service

SpyOnWeb

Find sites sharing an analytics ID, AdSense code, or IP

Steampipe

Query cloud and SaaS APIs as live SQL tables

Subfinder

a passive subdomain discovery tool that queries many public data sources

Sublist3r

Enumerate subdomains from public sources

Synapsint

All-in-one OSINT aggregator for domains, IPs, and emails

Threat Intelligence Platform

Domain/IP threat profile: WHOIS, DNS, SSL, reputation

Tracetcp

Windows TCP-port traceroute

URLCrazy

a domain typo and homoglyph generator for finding spoofed or suspicious looka

UltraTools

Free DNS, WHOIS, and IP diagnostic toolset

Validin

Infrastructure-pivot TI platform

ViewDNS.info

Free DNS, WHOIS, and reverse-IP utilities

Web-Check

All-in-one website DNS, TLS, headers and tech recon

Website Informer

Domain profile with WHOIS, DNS and owner data

Who.is

WHOIS and DNS lookup for domains and IPs