You have a domain.

Community database of fake banks, shipping companies and other scam websites, with reports and screenshots.

• Website
• Freemium

TakesDomain

Community database of reported malicious IPs. Shows abuse reports, a confidence score, the ISP and the usage type.

• Website
• Freemium

TakesIP addressDomain

Community threat-intelligence exchange. Look up an IP, domain or file hash to see the reports and campaigns it appears in.

• Website
• Free
• Account

TakesIP addressDomainFile hash

Generates variations of known subdomains (dev-, -staging, numbers) and resolves them to find hidden hosts.

• Command line
• Free
• Active

TakesDomain

B2B contact database: work emails, phone numbers and job history for professionals at a company, with a free tier.

• Website
• Freemium
• Account

TakesPerson's nameCompanyDomain

Checks an IP address or domain against 100+ email spam blocklists at once.

• Website
• Freemium

TakesIP addressDomain

Webroot BrightCloud (now OpenText) reputation score and content category for a URL or IP.

• Website
• Free

TakesURLIP addressDomain

Shows the technologies a website runs on (CMS, analytics, ad networks, hosting) and which other sites share the same tracking IDs.

• Website
• Freemium

TakesDomain

Free WHOIS, RDAP, DNS and IP lookups with name server history and certificate details, no sign-up.

• Website
• Freemium

TakesDomainIP address

Internet-wide scan data on hosts, services and certificates, for finding exposed assets and infrastructure linked to a target.

• Website
• Freemium
• Account

TakesIP addressDomain

Searches internet-wide scan findings for a domain: exposed admin panels, misconfigurations and leaked files.

• Website
• Freemium

TakesDomain

Crawls TLS certificates and Certificate Transparency logs to map every domain linked to a starting domain as a graph.

• Command line
• Free

TakesDomain

Fast Certificate Transparency search: every certificate issued for a domain, including subdomains in the certificate names.

• Website
• Free

TakesDomain

Tries to find the real server IP behind a Cloudflare-protected site using DNS history and subdomain checks.

• Command line
• Free
• Active

TakesDomain

Shows the name server history of a domain, revealing past hosting providers and ownership changes.

• Website
• Freemium

TakesDomain

Shows which websites link to a domain, from the open Common Crawl web graph. Useful for mapping networks of related sites.

• Website
• Free

TakesDomain

Search engine for exposed internet assets. Shows open ports, vulnerabilities and a risk score for an IP or domain.

• Website
• Freemium
• Account

TakesIP addressDomain

Searches Certificate Transparency logs for every TLS certificate issued to a domain, which often reveals forgotten subdomains.

• Website
• Free

TakesDomainCompany

Tracks which domains moved to or from a name server or hosting provider each day, useful for spotting infrastructure migrations.

• Website
• Freemium

TakesDomain

Open-source domain research toolkit: DNS, RDAP/WHOIS, passive subdomains, IP and ASN data, and mail security in one report.

• Website
• Free

TakesDomainIP address

Maps a domain's DNS records, subdomains and hosting providers and draws the result as a graph.

• Website
• Freemium

TakesDomain

Reverse IP, name server and mail server lookups: find other domains on the same infrastructure.

• Website
• Free

TakesDomainIP address

DNS enumeration script: standard records, zone transfer attempts, subdomain brute force, reverse lookups and cached-record snooping.

• Command line
• Free
• Active

TakesDomainIP address

Generates look-alike domains (typos, homoglyphs, swapped TLDs) and checks which are registered, to find phishing sites.

• Command line
• Free

TakesDomain

Web version of domain look-alike search: lists registered typo and homoglyph variants of a domain.

• Website
• Freemium

TakesDomain

Draws a domain's DNS delegation chain and DNSSEC signatures as a graph and highlights configuration errors.

• Website
• Free

TakesDomain

Free one-page report on a domain or IP: WHOIS for both the domain and its network, DNS records and a traceroute.

• Website
• Free

TakesDomainIP address

Commercial database of hundreds of billions of historical domain records: DNS, certificates, technologies and ownership links.

• Website
• Paid
• Account

TakesDomain

WHOIS and DNS lookup tools from easyDNS (formerly easyWhois), including registrar, name servers and record checks.

• Website
• Free

TakesDomain

Current WHOIS lookup for any domain. Historical WHOIS, hosting history and reverse lookups need a paid account.

• Website
• Freemium

TakesDomainIP address

Shows the email address pattern a company uses (for example first.last@), with example addresses as evidence.

• Website
• Freemium

TakesCompanyDomain

Generates every likely email address for a person from their name and company domain, ready to check with a verifier.

• Website
• Free

TakesPerson's nameDomain

Maps an organisation's internet-exposed hosts, subdomains, open ports and technologies from one domain.

• Website
• Freemium
• Account

TakesDomain

Checks whether Google currently flags a site as malware or phishing, the same warning Chrome shows.

• Website
• Free

TakesURLDomain

Searches files in publicly exposed cloud storage buckets (Amazon S3, Azure, Google Cloud) by keyword or company.

• Website
• Freemium
• Account

TakesDomainCompany

Finds email addresses linked to a company's domain and shows the address pattern the company uses (for example first.last@).

• Website
• Freemium
• Account

TakesDomainCompany

Shows who owns an IP range or ASN, which networks it connects to, and the domains hosted on an IP.

• Website
• Free

TakesIP addressDomain

IBM's threat-intelligence lookup for IPs, URLs, domains and hashes, with risk scores and related campaigns.

• Website
• Freemium
• Account

TakesIP addressDomainURLFile hash

ICANN's official registration data lookup (RDAP) for any domain, straight from the registry and registrar.

• Website
• Free

TakesDomain

Free website security tests: TLS configuration, security headers, and exposure of the domain on the dark web and in phishing.

• Website
• Freemium
• Active
• Account

TakesURLDomain

Unlimited free reverse DNS, subdomain and reverse CNAME lookups from The Hacker's Choice, with a JSON API.

• Website
• Free

TakesIP addressDomain

Free domain WHOIS lookup with registrar, dates, name servers and registrant details where published.

• Website
• Free

TakesDomain

Checks IPs, domains, emails and crypto wallets against many threat feeds and gives a reputation verdict.

• Website
• Freemium

TakesIP addressDomainEmail addressCrypto address

Graph-based link analysis. Run "transforms" on an entity (a domain, email or person) and see the connections drawn as a graph.

• Desktop app
• Freemium
• Account

TakesDomainEmail addressPerson's nameCompanyIP addressUsernamePhone number

Threat intelligence search aggregating 100+ sources, with a risk verdict for IPs, domains, URLs and file hashes.

• Website
• Freemium
• Account

TakesIP addressDomainURLFile hash

Malware sandbox that detonates files and URLs, and lets you search past public reports by IP, domain or hash.

• Website
• Freemium

TakesDocument / fileURLFile hashIP addressDomain

Fast subdomain search built from Certificate Transparency logs, including subdomains that were never publicly linked.

• Website
• Freemium

TakesDomain

Free passive DNS: which IPs a domain has pointed to over time and which domains used an IP.

• Website
• Free

TakesDomainIP address

Checks an IP or domain against hundreds of DNS blocklists and allowlists at once.

• Website
• Freemium

TakesIP addressDomain

Checks a domain's mail setup (MX, SPF, DKIM, DMARC) and whether a mail server's IP is on spam blocklists.

• Website
• Free

TakesDomainIP address

Checks whether a username is taken across social networks and whether the matching domain names are registered.

• Website
• Free

TakesUsernameDomain

Checks a username against 90+ social platforms and 30+ domain extensions to show where it is already registered.

• Website
• Free

TakesUsernameDomain

Hosting history of a website: which providers and IPs it used over time, plus technologies and risk rating.

• Website
• Freemium

TakesDomainURL

Internet scan search engine: open ports, web responses, certificates, DNS and WHOIS for IPs and domains.

• Website
• Freemium
• Account

TakesDomainIP address

Runs the Nikto web-server scanner against a site from a remote server to find outdated software, risky files and misconfigurations.

• Website
• Free
• Active

TakesURLDomain

The standard network scanner: finds live hosts, open ports, running services and their versions, and the operating system.

• Command line
• Free
• Active

TakesDomainIP address

Checks whether a Tor .onion address exists and returns metadata the AIL project has collected about it.

• Website
• Freemium

TakesURLDomain

Search engine of internet scan and threat data: exposed services, vulnerabilities and leaks tied to an IP or domain.

• Website
• Freemium
• Account

TakesDomainIP address

Maps an organisation's external attack surface, finding subdomains through passive sources, DNS enumeration and certificate data.

• Command line
• Free
• Active

TakesDomainCompany

Generates ready-made Google search operators (dorks) for a domain to find exposed files, login pages and directory listings.

• Website
• Freemium

TakesDomain

Web-based subdomain discovery combining DNS, certificates and search engines, with a free limited tier.

• Website
• Freemium
• Account

TakesDomain

Database of phishing URLs seen in the wild. Search a domain or IP to see phishing pages hosted on it.

• Website
• Free

TakesDomainIP addressURL

Finds the Microsoft 365 / Azure tenant behind a domain, and the other domains registered to the same tenant.

• Website
• Free

TakesDomain

Threat-intelligence lookups for IPs, domains and URLs, combining OSINT feeds with risk scores and related indicators.

• Website
• Freemium
• Account

TakesDomainIP addressURL

Modular reconnaissance framework with a Metasploit-style console. Its modules pull data from public sources and APIs into a local database.

• Command line
• Free

TakesDomainCompanyEmail addressPerson's name

Maps how a domain or IP connects to others: shared name servers, mail servers, reverse DNS and network ranges.

• Website
• Free

TakesDomainIP address

Long-running community list of domains and URLs that spread malware and spyware.

• Website
• Free

TakesDomainURL

Current and historical DNS records, WHOIS data and subdomains for a domain. The history shows where a site was hosted before.

• Website
• Freemium
• Account

TakesDomainIP address

Search engine for internet-connected devices. Shows the open ports, service banners and known vulnerabilities for an IP or search.

• Website
• Freemium
• Account

TakesIP addressDomain

Finds email addresses published on the web for a company domain or a person.

• Website
• Freemium

TakesDomainPerson's name

Checks whether an IP or domain is on Spamhaus blocklists and why (spam, botnet, compromised host).

• Website
• Freemium

TakesIP addressDomain

Automates OSINT collection with 200+ modules. Give it a domain, IP, email, name or username and explore the results in a web UI.

• Command line
• Free
• Active

TakesDomainIP addressEmail addressPerson's nameUsernamePhone number

Tests a server's TLS setup and shows its certificate chain, supported protocols and known weaknesses.

• Website
• Free
• Active

TakesDomain

Fast, passive subdomain discovery that queries dozens of online sources and never touches the target directly.

• Command line
• Free

TakesDomain

Finds subdomains of a domain by querying search engines and passive DNS sources, with optional brute forcing.

• Command line
• Free

TakesDomain

Scans a website for known malware, spam injections, blocklisting and outdated software.

• Website
• Free
• Active

TakesURLDomain

Official registry lookup for Swiss .ch and Liechtenstein .li domains.

• Website
• Free

TakesDomain

All-in-one lookup for domains, IPs, emails and phone numbers, bundling WHOIS, DNS, reputation and breach checks.

• Website
• Free

TakesUsernameEmail addressPhone numberDomainIP address

Collects emails, names, subdomains, IPs and URLs for a domain from search engines, certificate logs and other public sources.

• Command line
• Free

TakesDomain

Shows Trend Micro's safety rating and category for a website.

• Website
• Free

TakesURLDomain

Scans a URL in a sandboxed browser and records screenshots, requests, certificates and phishing indicators.

• Website
• Freemium

TakesURLDomain

abuse.ch's database of URLs used to spread malware, with the payloads they delivered and when they were active.

• Website
• Free

TakesURLDomainIP addressFile hash

Loads a URL in a sandboxed browser and records every request, redirect, screenshot and technology the page uses.

• Website
• Freemium
• Active

TakesURLDomainIP address

Checks a website against dozens of blocklists and reputation services to spot scam and malware sites.

• Website
• Free

TakesURLDomain

Locates an IP address or domain on a map with its provider and network owner.

• Website
• Free

TakesDomainIP address

Free search of current and historical DNS, including which domains pointed to an IP and when.

• Website
• Freemium

TakesDomainIP address

Dozens of free DNS tools, notably reverse IP (other sites on a server) and reverse WHOIS (other domains owned by the same person).

• Website
• Free

TakesDomainIP addressEmail addressPerson's name

Scans files, URLs, domains, IPs and hashes with 70+ security engines and shows how they relate to one another.

• Website
• Freemium

TakesFile hashURLDomainIP addressDocument / file

Finds a person's work email address from their name and company domain, and verifies it.

• Website
• Freemium

TakesPerson's nameDomain

Identifies the technologies a website uses. Its free browser extension works on any page you visit.

• Website
• Freemium
• Account

TakesURLDomain

Archived snapshots of web pages going back to 1996. See how a site looked, and what it said, before it was changed or deleted.

• Website
• Free

TakesURLDomain

Open-source all-in-one website report: IP, DNS, TLS, headers, cookies, tech stack, open ports and more.

• Website
• Free

TakesURLDomain

IP and domain intelligence: hosting, network owner, related domains and risk indicators.

• Website
• Freemium

TakesDomainIP address

One-page summary of a website: owner WHOIS, hosting IP, DNS, traffic estimate and similar sites.

• Website
• Free

TakesDomainURL

WHOIS and RDAP lookup for domains and IPs, plus DNS records and the history of name server changes.

• Website
• Free

TakesDomainIP address

Archive of billions of current and historical WHOIS records. Click an email or name to find every other domain registered with it.

• Website
• Freemium

TakesDomainEmail addressPerson's name

Simple network tools, best known for reverse IP lookup (other sites on the same server) and open-port checks.

• Website
• Free

TakesIP addressDomain

Archive of website defacements with mirrors of the defaced pages and the attacker names that claimed them.

• Website
• Free

TakesDomain