Search by domain

Eye of God - seeks by:
- Full name, full name + date of birth
- state number of a car in Russia and Ukraine, VIN of a car
- phone number
- e-mail
- physical address
- nickname / id Telegram
- will show user Telegram chats
- password
- INN
- profiles VK.com, Facebook, Odnoklassniki
- IP address, domain
- Bitcoin wallet
- a photo of a person, a photo of a car
- to legal entities
- search for people by geolocation.

Bot shows information by domain/IP address, Shodan results, subdomain search, IP behind Cloudflare, port scanner, information about BSSID, MAC and more.

Quick OSINT Bot. Bot searches by: phone number, e-mail, password, passport, INN, SNILS, VK.com, Telegram, Instagram, Facebook, Twitter, Livejournal, Linkedin, IP address, domain, Bitcoin wallet address. Also implemented is the search for people by location (geolocation).

Universal Search Bot. Bot searches by:
- e-mail (reviews on Google Maps, Google Albums, Google Calendar, Yandex, Sberbank of Russia, Avatarapi, fullcontact.com, domru.ru), search in leaks, search for companies, Skype accounts, mail.ru, Gravatar, MySpace, IntelX, Instagram, ICQ
- image
- location
- phone number (fullcontact.com, Skype, Sberbank of Russia, domru.ru, VKontakte, ICQ)
- Vkontakte page
- domain
- IP address
- Xiaomi ID
- Telegram ID (Telegram spamblock check - Combot Anti-Spam)
- bank card number (will show the name of the owner)
- Russian car number

WHOIS history (only for .ru, .su, .рф domains)

Whois service, Whois history, reverse domain lookup by contact information.

Paid service for viewing WHOIS history

  • You can check whois history in Web archive:
Upgrade your License to view link

Lets you see all the historical WHOIS records of a domain name

Domain Name Data API. Get comprehensive domain name data, uncover new domains and the relationships between them. Get DNS details, scraped website content, outbound links, backlinks, and other hosting details for any domain.

Domains of same owner (only for .ru and .рф). Search by domain or e-mail.

Search e-mail, login, phone number, username, password in leaks

Intelligence X - search engine and data archive. The search works with selectors, i.e. specific search terms such as e-mail addresses, domains, URLs, IPs, CIDRs, Bitcoin addresses, IPFS hashes, etc. It searches in places such as the darknet, document sharing platforms, whois data, public data leaks and others. It keeps a historical data archive of results, similar to how the Wayback Machine from archive.org stores historical copies of websites.

DNS recon & research, find & lookup DNS records

Domain Big Data. Search by domain, email, IP address.

Analogue of Shodan. Get information about domain/IP address

Subdomain bruteforce

Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters

Search subdomains

SynapsInt - service for automatically collecting information by domain, IP, number, e-mail, Bitcoin wallet. Search for subdomains.

Visual Site Mapper - visualization (sitemap) of site links

  • PWNDB2 API -(UNOFFICIAL):
Upgrade your License to view link

Detect in which cloud (AWS, Azure, Cloudflare, DigitalOcean, Fastly, Github, Google, Linode, Oracle) and in which region the site hosted

Service searches for subdomains, resources, collects information about the domain (WHOIS), IP and DNS addresses, searches for e-mail, CVE vulnerabilities and much more.

Detect subdomains in your DNS recon.

Search by SSL certificate, show subdomains from sertificate

Search at leaked databases by email, username, password, domain, keyword

Calculate a fingerprint of a website (HTML, Favicon, SSL) and generates links for search.

Paid view historical IP addresses, name servers, and registrars

Service scans a domain or IP address, collects a large amount of information (server IP addresses, links, whois, site screenshot, and much more) and stores this data. You can view historical data.

Search by domain, IP address, registrar name, phone number, e-mail. Shows WHOIS, history of IP addresses, sites on the same IP.

  • Search by domain in Pastebin Leaks:
Upgrade your License to view link

  • Replace 123456789 with Yandex Metrica ID. Authorization required. Access may be closed. Shows age, site directories, you can identify the admin as the first visitor.:
Upgrade your License to view link

Check domain or IP address on Virustotal. It will show you the domains attached to IP (Passive DNS Replication), WHOIS history, mentions in the community, general information.

Historical versions of sites since 1996

Search sites on the same IP address. Search by IP address or domain.

Search sites on the same IP address. Search by domain.

Search sites on the same IP address. Search by IP address.

Search sites on the same IP address. Search by IP address or domain.

Search sites on the same IP address. Search by IP address or domain.

Search sites on the same IP address. Search by IP address or domain.

Find all websites hosted on the same IP-address (and nearby IP)

WHOIS service - get information about the IP address or domain: registration date, owner, location, contact information

WHOIS service - get information about the IP address or domain: registration date, owner, location, contact information

WHOIS service - get information about the IP address or domain: registration date, owner, location, contact information

WHOIS service - get information about the IP address or domain: registration date, owner, location, contact information

Search by domain and e-mail

WHOIS service - get information about the IP address or domain: registration date, owner, location, contact information

Service that stores copies of sites and pages since 1996.

Service that stores copies of sites and pages, but only at the request of the user.

European Internet Archive

Portuguese Internet Archive. The database contains Portugal and worldwide sites.

Only UK sites

Get the email addresses behind any website. The Domain Search lists all the people working in a company with their name and email address found on the web. With 100+ million email addresses indexed, effective search filters and scoring, it's Hunter's most powerful email-finding tool.

Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed. You are searching 25 billion records.

After registration, you can search for contacts by domain, search by Twitter profile, Linkedin.

DNS history by domain/IP

DNS history by domain/IP

View all DNS historical records for a specified domain name.

View all DNS historical records for a specified domain name.

https://host.io/googleanalytics/UA-*********

Shodan is a search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters

Upgrade your License to view link

Write ID at search field

Google Analytics ID Explorer

Find domains with the same Google Analytics ID

  • Google Search in URL:
http://google.com/search?q=url:

  • Yandex Search in URL:
https://yandex.ru/search/?text=url:

  • Bing Search in URL:
Upgrade your License to view link

  • Search in Google Cache:
Upgrade your License to view link

  • Yahoo Search in URL:
Upgrade your License to view link

  • Path disclosure:
https://google.com/search?q=site: intitle:index.of

  • Config files:
https://google.com/search?q=site: ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:ini | ext:env

  • Databases:
Upgrade your License to view link

  • Log files:
Upgrade your License to view link

  • Backups:
Upgrade your License to view link

  • Login pages:
Upgrade your License to view link

  • Database errors:
Upgrade your License to view link

  • Documents:
Upgrade your License to view link

  • phpinfo():
Upgrade your License to view link

  • CGI files:
Upgrade your License to view link

  • Related sites:
Upgrade your License to view link

  • Backups (in URL):
Upgrade your License to view link

  • PHP errors:
Upgrade your License to view link

  • Search on Pastebin and similar sites:
Upgrade your License to view link

  • Search on Github and Gitlab:
Upgrade your License to view link

  • Search on Stackoverflow:
Upgrade your License to view link

  • Search subdomains:
Upgrade your License to view link

  • Search in URL:
Upgrade your License to view link

IP history

IP history by domain

Data analysis & OSINT multitool. Obtain, visualize and analyze data in one place. After registration, you can search by phone number, e-mail, IP address, domain, login (username, nickname).

Open source tool for automated information gathering. Searches by phone number, e-mail, IP address, domain, nickname, login, name, crypto wallet. Can be used in the cloud after registration.

Find domains with the same Google Adsense ID

Reveal all domains that use the same mail server

Reveal all domains that use the same mail server

Finding mentions of a domain name in the code of other sites

Reveal all domains that use the same name server

Reveal all domains that use the same name server

Reveal all domains that use the same name server

Reveal all domains that use the same name server

Discover the reverse DNS entries for an IP address, a range of IP addresses or a domain name. IP based reverse DNS lookups will resolve the IP addresses in real time, while the domain name or hostname search uses a cached database.

Site scanner (crawler). Retrieves URLs (internal and external), e-mail, accounts, documents, authentication keys, hashes, files, subdomains, DNS information.

Intelligence automation framework designed to collect information during penetration testing of web applications. Searches for subdomains, scans ports and folders.

sn0int is a semi-automatic OSINT framework and package manager. It was built for IT security professionals and bug hunters to gather intelligence about a given target or about yourself. sn0int is enumerating attack surface by semi-automatically processing public information and mapping the results in a unified format for followup investigations.
Packages:
- Accounts (Instagram, Github, Keybase, Twitch, Steam, npm, Soundcloud, Tiktok, Pornhub, Tellonym, Tinder, Fediverse, namechk, Chaturbate, Venmo, Patreon, Deviantart, Protondb, letterboxd, chefkoch, Periscope)
- Crypto currency wallet
- Domain
- IP address
- E-mail
- Phone number
- Images

Metagoofil is a tool for extracting metadata of public documents (pdf,doc,xls,ppt,etc) availables in the target websites. This information could be useful because you can get valid usernames, people names, for using later in bruteforce password attacks (vpn, ftp, webapps), the tool will also extracts interesting paths of the documents, where we can get shared resources names, server names, etc. This new version will also extract emails addresses from PDF and Word documents content.

Python tool for enumerate subdomains. Enumerates using search engines (Google, Yahoo, Bing, Baidu and Ask) and services Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS.

Selecting subdomains from the dictionary

Site directory crawler (without bruteforce).

Finds the same favicon.ico in the list of sites

Site directory scanner

The utility checks for Microsoft Office365, gives you an email, a cloud name and a link to log in to the office

Detect IP Cloudflare

Detect IP Cloudflare

Detect IP Cloudflare

Detect IP Cloudflare

Maintained collection of free actionable resources for those conducting OSINT investigations. None of the links below should point to paid software or services, these are for actual OSINT investigations.

OSINT Essentials. OSINT links catalog

Huge catalog of resources for OSINT in Russian. All links by category.

Huge catalog of resources for OSINT in English. All links by category.

Bellingcat Online Investigation Toolkit

OSINT Dojo Resources

Awesome OSINT. A curated list of amazingly awesome open source intelligence tools and resources.

Collections of Tools, Bookmarks, and other guides created to aid in OSINT collection

OSINT Framework

OSINT Framework

Terrorism & Radicalisation Research Dashboard. This dashboard is a curation of useful links to third party websites, datasets, databases, OSINT tools and more for the study of (online) terrorism and radicalisation.

List of some favorite Sourcing, Internet Research, and Social Recruiting Tools and Resources.

Research and investigation links

OSINT4ALL