Domain OSINT tools

Enumerates a domain's DNS: standard records, SRV services, zone transfer checks and DNSSEC

Takes Domain00

Gets every known URL of a domain from the Wayback Machine, Common Crawl, OTX and urlscan

Takes Domain00

Finds a domain's subdomains passively from dozens of public sources

Takes Domain00

Gathers emails, subdomains, hosts and IPs for a domain from public search engines and datasets

Takes Domain00

Reads a server's TLS certificate: names it covers, issuer, validity, fingerprints and JARM

Takes Domain00

Finds a domain's subdomains in Certificate Transparency logs through crt.sh or Cert Spotter

Takes Domain00

Looks up a domain's A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records

Takes Domain00

Test tool for checking OTInstaller Registry publishing end to end.

Takes Domain00