Find DNS Records from a Domain

DomainTools

Enterprise domain and DNS intelligence

Maltego

Visual OSINT link-analysis platform

OWASP Amass

Attack-surface mapping and DNS enumeration

SpiderFoot

Automated OSINT reconnaissance framework

VirusTotal

Analyze files, URLs, domains, and IPs

urlscan.io

Scan and analyze URLs safely

Altdns

a subdomain permutation tool that generates altered hostnames for DNS brute f

Assetfinder

a command-line tool for finding domains and subdomains related to a target or

Blacklist Checker

Check IPs and domains against 100+ DNS blacklists

CIRCL Passive DNS

CIRCL passive DNS service for researchers

CentralOps

Web toolkit for WHOIS, DNS, and IP network lookups

Cisco Umbrella Investigate

Cisco DNS-resolver threat intel

Cloudflare Radar

Internet trends and DDoS data from Cloudflare

CompleteDNS

Historical nameserver records and reverse-NS lookup

DMNS

Domain reconnaissance and DNS lookup tool

DNSCrypt-proxy

Encrypted DNS proxy

DNSDumpster

Passive DNS and subdomain reconnaissance

DNSLytics

Reverse-DNS and SSL pivoting platform

DNSRecon

a DNS enumeration script for records, zone transfers, brute force, and cache

DNSValidator

a resolver validation tool used to build reliable DNS resolver lists for reco

DNScan

Python DNS bruteforce and AXFR tester

DNSstuff

Online DNS, reverse-DNS and blocklist lookup suite

Farsight DNSDB

Commercial passive DNS by DomainTools

Fierce

a DNS reconnaissance tool for locating non-contiguous IP space and related ho

Findomain

a cross-platform subdomain enumerator using certificate transparency and publ

Gotator

a permutation generator for creating candidate subdomains during discovery wo

Hunt.io

Adversary infrastructure tracking service

MXToolbox

a DNS, mail, blacklist, and network diagnostic platform for domain and IP inv

MassDNS

a high-performance DNS stub resolver for large-scale host and subdomain valid

Microsoft Defender Threat Intelligence

Microsoft passive DNS and TI graph

Mnemonic ARGUS

Mnemonic passive DNS and TI platform

Mtr Network Diagnostic

Combined traceroute and ping diagnostic

Multi-RBL Check

Free multi-DNSBL and FCrDNS check for mail servers

Netlas.io

Internet scan search engine for hosts, DNS, certs and WHOIS

OSINT.sh WHOIS History

Historical WHOIS records for a domain name

OpenGraph Intel

Visual OSINT framework that enriches entities via transforms into graphs

PassiveDNS by mnemonic

mnemonic open passive DNS service

RIPE Atlas

Global on-demand measurement network

Rapid7 Project Sonar

Rapid7 free internet-scan datasets

RapidDNS

DNS records, subdomains, and reverse-IP lookup

Silent Push

Pre-emptive adversary-infra TI service

SpyOnWeb

Find sites sharing an analytics ID, AdSense code, or IP

Steampipe

Query cloud and SaaS APIs as live SQL tables

Subfinder

a passive subdomain discovery tool that queries many public data sources

Sublist3r

Enumerate subdomains from public sources

Synapsint

All-in-one OSINT aggregator for domains, IPs, and emails

Threat Intelligence Platform

Domain/IP threat profile: WHOIS, DNS, SSL, reputation

Tracetcp

Windows TCP-port traceroute

URLCrazy

a domain typo and homoglyph generator for finding spoofed or suspicious looka

Validin

Infrastructure-pivot TI platform

Web-Check

All-in-one website DNS, TLS, headers and tech recon

Who.is

WHOIS and DNS lookup for domains and IPs

Whois.com

Domain WHOIS and DNS lookup service

WhoisXML API

Commercial WHOIS and domain-research APIs

ZDNS

High-performance DNS resolver by ZMap

dnsenum

a DNS enumeration tool for discovering name servers, MX records, subdomains,

dnstwist

a domain permutation tool for detecting typosquatting, phishing, and brand im

dnsx

a DNS toolkit for resolving, filtering, and validating domain and subdomain r

puredns

a fast domain resolver and bruteforcing tool built around massdns for large r

reconFTW

Automated domain recon: subdomains, web probing, OSINT and vuln scan