Start from what you have.

Community database of reported malicious IPs. Shows abuse reports, a confidence score, the ISP and the usage type.

• Website
• Freemium

TakesIP addressDomain

Live and historical flight tracking from unfiltered ADS-B data, including aircraft that other trackers hide.

• Website
• Free

TakesAircraft

Flight tracker focused on military aircraft, built on unfiltered ADS-B Exchange data, with movement history per airframe.

• Website
• Free

TakesAircraft

Community threat-intelligence exchange. Look up an IP, domain or file hash to see the reports and campaigns it appears in.

• Website
• Free
• Account

TakesIP addressDomainFile hash

Maps registered cell towers and antennas near a US address, with owner and registration details from FCC records.

• Website
• Free

TakesLocation / coordinates

Interactive malware sandbox: run a file or URL in a virtual machine and watch its processes, network traffic and indicators live.

• Website
• Freemium
• Account

TakesDocument / fileURLFile hash

Saves a snapshot of a web page on demand and searches existing snapshots. Useful when the Wayback Machine is blocked or missed a page.

• Website
• Free

TakesURL

Blockchain analytics with hundreds of millions of labelled addresses. Shows who controls an address and traces funds between entities.

• Website
• Freemium
• Account

TakesCrypto addressCompany

Vehicle history by VIN for European and North American cars: past damage, mileage readings, inspections and registrations. Full reports are paid.

• Website
• Freemium
• Account

TakesVehicle / plate

Looks up European vehicles by VIN or licence plate and returns make, model, engine and technical registration data.

• Website
• Freemium
• Account

TakesVehicle / plate

Baidu reverse image search. Finds copies of an image on Chinese websites that Western search engines rarely index.

• Website
• Free

TakesImage

Baidu's map of China, with far better street-level and place coverage of the mainland than Google Maps.

• Website
• Freemium

TakesLocation / coordinates

Microsoft reverse image search. You can crop to one object in a photo and search for just that part.

• Website
• Free

TakesImage

Microsoft maps with aerial and bird's-eye imagery, often captured on different dates than Google's, which helps when verifying a location.

• Website
• Free

TakesLocation / coordinates

Looks up a Bitcoin address and shows scam reports, community tags and web pages where the address has been mentioned.

• Website
• Free

TakesCrypto address

Explorer for 40+ blockchains showing address balances, token transfers and DEX trades, with a GraphQL API for bulk queries.

• Website
• Freemium

TakesCrypto address

Simple Bitcoin address checker showing the current balance and transaction history, with no sign-up.

• Website
• Free

TakesCrypto address

Searches 600+ sites for accounts matching a username or email address and can export the results as a PDF or CSV report.

• Command line
• Free

TakesUsernameEmail address

Bitcoin blockchain explorer showing the balance, transactions and connected addresses for a wallet.

• Website
• Free

TakesCrypto address

Blockchain explorer covering Bitcoin, Ethereum and 40+ other chains. Look up addresses and transactions, or run filtered queries across a chain.

• Website
• Freemium

TakesCrypto address

Shows the technologies a website runs on (CMS, analytics, ad networks, hosting) and which other sites share the same tracking IDs.

• Website
• Freemium

TakesDomain

Identifies the make, model and generation of a car from a photo.

• Website
• Freemium

TakesImage

Decodes a VIN for free and sells history reports covering accidents, mileage, theft records and past owners in many countries.

• Website
• Freemium

TakesVehicle / plate

Internet-wide scan data on hosts, services and certificates, for finding exposed assets and infrastructure linked to a target.

• Website
• Freemium
• Account

TakesIP addressDomain

Community reports of crypto addresses and websites used in scams, ransomware and fraud, across Bitcoin, Ethereum and other chains.

• Website
• Free

TakesCrypto address

Search engine for exposed internet assets. Shows open ports, vulnerabilities and a risk score for an IP or domain.

• Website
• Freemium
• Account

TakesIP addressDomain

Searches Certificate Transparency logs for every TLS certificate issued to a domain, which often reveals forgotten subdomains.

• Website
• Free

TakesDomainCompany

Tracks which domains moved to or from a name server or hosting provider each day, useful for spotting infrastructure migrations.

• Website
• Freemium

TakesDomain

IP geolocation lookups with location, ISP, connection type and a threat assessment, plus a free downloadable database.

• Website
• Freemium

TakesIP address

Maps a domain's DNS records, subdomains and hosting providers and draws the result as a graph.

• Website
• Freemium

TakesDomain

DNS enumeration script: standard records, zone transfer attempts, subdomain brute force, reverse lookups and cached-record snooping.

• Command line
• Free
• Active

TakesDomainIP address

Draws a domain's DNS delegation chain and DNSSEC signatures as a graph and highlights configuration errors.

• Website
• Free

TakesDomain

Free one-page report on a domain or IP: WHOIS for both the domain and its network, DNS records and a traceroute.

• Website
• Free

TakesDomainIP address

Commercial database of hundreds of billions of historical domain records: DNS, certificates, technologies and ownership links.

• Website
• Paid
• Account

TakesDomain

WHOIS and DNS lookup tools from easyDNS (formerly easyWhois), including registrar, name servers and record checks.

• Website
• Free

TakesDomain

Current WHOIS lookup for any domain. Historical WHOIS, hosting history and reverse lookups need a paid account.

• Website
• Freemium

TakesDomainIP address

Ethereum blockchain explorer showing balances, transactions, token transfers and public labels for an address.

• Website
• Free

TakesCrypto address

European business directory of about 3 million companies, searchable by name, product or sector, with contact and location details.

• Website
• Free

TakesCompany

Reads and edits photo metadata (camera, timestamps, GPS) entirely in your browser, so the image is never uploaded.

• Website
• Free

TakesImage

Reads and edits metadata in images, video, audio and documents, such as camera model, GPS coordinates, timestamps, author and software.

• Command line
• Free

TakesImageVideoDocument / file

Checks whether an IP address was running as a Tor relay on a given date, which tells you if traffic from it could have come from Tor users.

• Website
• Free

TakesIP address

Looks up a US licence plate by state and shows the vehicle make, model and year.

• Website
• Freemium

TakesVehicle / plate

Looks up a Dutch licence plate and shows the vehicle specs, inspection (APK) history and registration data from the RDW.

• Website
• Freemium

TakesVehicle / plate

Hundreds of public IP blocklists (malware, botnets, proxies, abuse) in one place. Search an IP to see every list it appears on.

• Website
• Free

TakesIP address

Browser-based photo forensics: clone detection, error level analysis, noise analysis and metadata, all run locally.

• Website
• Free

TakesImage

Investigates a Google account from its Gmail address: public profile photo, Maps reviews, calendar and other exposed Google services.

• Command line
• Free
• Account

TakesEmail address

Investigates a GitHub user: past usernames and names, emails linked to the account, SSH keys and close contacts.

• Command line
• Free
• Account

TakesUsernameEmail address

Google's reverse image search. It is strong at identifying landmarks, products and text in an image.

• Website
• Free

TakesImage

Satellite imagery, Street View and business listings for most of the world. The standard starting point for geolocating a photo.

• Website
• Free

TakesLocation / coordinates

Shows whether an IP is mass-scanning the internet or belongs to a known benign service, so you can separate targeted activity from background noise.

• Website
• Freemium

TakesIP address

Shows which known data breaches an email address appears in, with the date and the kinds of data exposed.

• Website
• Freemium

TakesEmail address

Asks mobile networks whether a number is live, which carrier it is on now and whether it has been ported.

• Website
• Paid
• Account

TakesPhone number

Checks whether an email address is registered on 120+ sites by probing their sign-up and password-reset flows, without notifying the owner.

• Command line
• Free

TakesEmail address

Finds email addresses linked to a company's domain and shows the address pattern the company uses (for example first.last@).

• Website
• Freemium
• Account

TakesDomainCompany

Geolocates an IP address and shows its city, ISP, ASN and time zone on a map.

• Website
• Freemium

TakesIP address

Browser extension for checking videos and images. It splits videos into keyframes for reverse search, reads metadata and applies forensic filters.

• Browser extension
• Free

TakesVideoImageSocial media post

IP geolocation with ISP, ASN, usage type and detection of VPNs, proxies and Tor exits.

• Website
• Freemium

TakesIP address

Looks up an IP address in several geolocation databases side by side, so you can see where they disagree.

• Website
• Free

TakesIP address

Checks an IP against dozens of blocklists and bundles related tools: WHOIS, reverse DNS and ping.

• Website
• Freemium

TakesIP address

Windows app that inspects how a JPEG was compressed and identifies whether it came straight from a camera or was re-saved by an editor.

• Desktop app
• Free

TakesImage

Builds a profile of a person from a username. Searches 3,000+ sites and pulls names, links and other identifiers out of the accounts it finds.

• Command line
• Free

TakesUsername

Graph-based link analysis. Run "transforms" on an entity (a domain, email or person) and see the connections drawn as a graph.

• Desktop app
• Freemium
• Account

TakesDomainEmail addressPerson's nameCompanyIP addressUsernamePhone number

Live ship positions and voyage history from AIS data. Look up a vessel by name, IMO or MMSI number.

• Website
• Freemium

TakesVessel

Scans files, hashes, URLs and IPs with 20+ antivirus engines and a sandbox, and shows the verdict from each.

• Website
• Freemium

TakesFile hashDocument / fileURLIP address

Checks a domain's mail setup (MX, SPF, DKIM, DMARC) and whether a mail server's IP is on spam blocklists.

• Website
• Free

TakesDomainIP address

Checks whether a username is taken across social networks and whether the matching domain names are registered.

• Website
• Free

TakesUsernameDomain

Checks a username against 90+ social platforms and 30+ domain extensions to show where it is already registered.

• Website
• Free

TakesUsernameDomain

Analyses a phone number against international numbering plans to show its country, number type and original carrier.

• Website
• Free

TakesPhone number

The US Treasury's official search of sanctioned people and companies, with fuzzy name matching.

• Website
• Free

TakesPerson's nameCompany

Scans the open ports of an IP or host from a remote server, so the scan does not come from your own connection.

• Website
• Free
• Active

TakesIP address

The largest open database of companies, with officers, registered addresses and filings from 140+ jurisdictions.

• Website
• Freemium

TakesCompanyPerson's name

Open database of sanctioned people and companies, politically exposed persons and watchlists, merged from hundreds of sources.

• Website
• Freemium

TakesPerson's nameCompany

Community-edited world map, often more detailed than commercial maps for paths, buildings and small features.

• Website
• Free

TakesLocation / coordinates

Finds accounts registered to an email, phone number or username across hundreds of services and puts them on a timeline and map.

• Website
• Freemium
• Account

TakesUsernameEmail addressPhone numberCrypto address

Queries OpenStreetMap for places that match what a photo shows, for example a pharmacy next to a bus stop within 200 m of a river.

• Website
• Free

TakesLocation / coordinatesImage

UK government page linking to the official company registry of nearly every country, a quick way to find the right register to search.

• Website
• Free

TakesCompany

Maps an organisation's external attack surface, finding subdomains through passive sources, DNS enumeration and certificate data.

• Command line
• Free
• Active

TakesDomainCompany

Tells you whether a US phone number is a mobile, landline, VoIP or prepaid line, which helps spot throwaway numbers.

• Website
• Free

TakesPhone number

Collects basic information about an international phone number (country, carrier, line type) and generates search queries to find where it appears online.

• Command line
• Free

TakesPhone number

Scans Office documents and PDFs for exploits and hidden macros and scores how likely the file is to be malicious.

• Website
• Freemium

TakesDocument / file

Checks whether an email address exists by asking its mail server, without sending an email. Open source, also available as a hosted API.

• Website
• Free
• Active

TakesEmail address

Modular reconnaissance framework with a Metasploit-style console. Its modules pull data from public sources and APIs into a local database.

• Command line
• Free

TakesDomainCompanyEmail addressPerson's name

Current and historical DNS records, WHOIS data and subdomains for a domain. The history shows where a site was hosted before.

• Website
• Freemium
• Account

TakesDomainIP address

Checks whether a username exists on 400+ social networks and websites.

• Command line
• Free

TakesUsername

Search engine for internet-connected devices. Shows the open ports, service banners and known vulnerabilities for an IP or search.

• Website
• Freemium
• Account

TakesIP addressDomain

Automates OSINT collection with 200+ modules. Give it a domain, IP, email, name or username and explore the results in a web UI.

• Command line
• Free
• Active

TakesDomainIP addressEmail addressPerson's nameUsernamePhone number

Fast, passive subdomain discovery that queries dozens of online sources and never touches the target directly.

• Command line
• Free

TakesDomain

Shows the sun's position and shadow direction for any place and time, to check when a photo was taken or narrow down where.

• Website
• Free

TakesLocation / coordinatesImage

Collects emails, names, subdomains, IPs and URLs for a domain from search engines, certificate logs and other public sources.

• Command line
• Free

TakesDomain

Finds where an image appears online and can sort results by date, which helps find the oldest copy and the original source.

• Website
• Freemium

TakesImage

Caller ID app with a large crowdsourced database. Look up a number to see the name people saved it under and any spam reports.

• Website
• Freemium
• Account

TakesPhone number

Loads a URL in a sandboxed browser and records every request, redirect, screenshot and technology the page uses.

• Website
• Freemium
• Active

TakesURLDomainIP address

Checks whether a username or email address is registered on 1,000+ sites across social, developer and gaming platforms.

• Command line
• Free

TakesUsernameEmail address

Search and download satellite imagery (Landsat, Sentinel) and historical aerial photos for any area and date range.

• Website
• Free
• Account

TakesLocation / coordinates

Live ship positions from AIS. Look up a vessel by name, IMO or MMSI number to see its location, destination and recent port calls.

• Website
• Freemium

TakesVessel

Scans files, URLs, domains, IPs and hashes with 70+ security engines and shows how they relate to one another.

• Website
• Freemium

TakesFile hashURLDomainIP addressDocument / file

Finds a person's work email address from their name and company domain, and verifies it.

• Website
• Freemium

TakesPerson's nameDomain

Groups Bitcoin addresses into wallets and labels known exchanges and services, so you can follow funds between entities.

• Website
• Free

TakesCrypto address

Archived snapshots of web pages going back to 1996. See how a site looked, and what it said, before it was changed or deleted.

• Website
• Free

TakesURLDomain

Internet Archive's browser extension. Save the page you are on, or load its archived copy when a link is dead.

• Browser extension
• Free

TakesURL

Downloads every Wayback Machine snapshot of a URL, with optional date filters, so you can compare versions offline.

• Command line
• Free

TakesURL

Command-line and Python interface to the Wayback Machine: save pages, list every snapshot, or fetch the oldest or newest copy.

• Command line
• Free

TakesURL

Web front end for the WhatsMyName community dataset. Checks a username across hundreds of sites from your browser.

• Website
• Free

TakesUsername

Monero block explorer for looking up transactions and blocks. It runs without JavaScript and is also available over Tor.

• Website
• Free

TakesCrypto address

Reverse image search with strong face and scene matching. It often finds matches that other engines miss.

• Website
• Free

TakesImage

Near-real-time satellite imagery and weather maps, useful for checking conditions at a place on a given day.

• Website
• Free

TakesLocation / coordinates