Network & IP Intelligence
IP Lookup
Geolocation, ASN, ISP info
IPInfo
Enriched IP intelligence, ASN, abuse contacts
IP WHOIS / RDAP
ASN, CIDR, network entities via RDAP
Shodan
Open ports, services, CVEs, banners
Censys
Host scan: services, certs (250 req/month free)
GreyNoise
Internet noise, scanner classification
Netlas
Alternative internet scanner
Reverse IP Lookup
PTR records, hosting, org, ASN
Domain & DNS
WHOIS Lookup
Registrant, dates, nameservers
DNS Enumeration
A, AAAA, MX, NS, TXT, CNAME, SOA, CAA
Subdomain Enumeration
Wordlist bruteforce (54 common subdomains)
Certificate Transparency
Subdomains via crt.sh CT logs
SSL/TLS Certificate
Subject, issuer, expiry, SAN, cipher
theHarvester
Email & host harvesting from public sources
Person & Social Intelligence
Username Search
Check 20 platforms simultaneously
Maigret
Deep username OSINT — 50 sites (30s timeout)
Sherlock
Username across 100 social networks (30s timeout)
Instagram Profile
Public profile metadata via Instaloader
Email Investigation
MX, disposable detection, HIBP, holehe
Web & File Analysis
URL Reputation
URLhaus + VirusTotal (optional key)
HTTP Headers Analysis
Security headers audit + technology fingerprint
EXIF Metadata
Extract GPS, camera, timestamps from images