Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Tools: domain-name (97)

Pentesting tools tagged domain-name. See all tools or the category key.

Team (best effort)

AlienVault Open Threat Exchange

Community-driven threat intelligence platform enabling collaborative defense with 180K+ participants sharing 19M+ threats daily.

domain-name

AltDNS (T)

Permutation-based DNS tool that generates and resolves alternative subdomains from known names.

domain-name

AnalyzeID

Reverse lookup service for tracking IDs such as Google Analytics, AdSense, and affiliate identifiers.

domain-name

Aquatone (T)

Go-based tool for domain reconnaissance that automates subdomain discovery, HTTP service scanning, screenshot capture, and visual HTML report…

domain-name

Belati (T)

Open-source OSINT data collection and automation framework for gathering information from multiple sources.

domain-name

Blackweb

Open-source project consolidating public malware domain blacklists optimized for Squid-Cache compatibility.

domain-name

BlueCoat WebPulse

Web reputation filtering service rating URLs with 50+ language support. Processes 180+ million rating requests daily with Dynamic Link Analysis for…

domain-name

Bluto (T)

Recon utility for domain intelligence including DNS records, email patterns, and infrastructure clues.

domain-name

BuiltWith

Technology profiling platform that identifies web stacks, frameworks, analytics, and hosting signals.

domain-name

Burp Suite (T)

Industry-standard web application security testing platform for manual and automated vulnerability assessment.

documentation-evidence-capture domain-name

Catphish (T)

Red team tool for generating phishing domains using homoglyphs, punycode, and domain manipulation techniques.

domain-name

Censys

Internet-wide scanner and search engine for hosts, certificates, and services.

domain-name

certgraph (T)

CLI tool that crawls SSL certificates via Certificate Transparency logs to create a directed graph of domain relationships. Supports multiple drivers…

domain-name

CertKit - Certificate Transparency Log Search

Fast Certificate Transparency log search tool using Clickhouse for sub-second queries. Discover all certificates issued to a domain, including…

domain-name

Change Detection

Open-source change-monitoring system for tracking updates on websites over time.

domain-name

ChangeDetect

Open-source website change detection platform with both self-hosted and hosted options. Supports visual diffs, notifications, and automation…

domain-name

CheckShortURL

Preview service for shortened URLs with destination and threat-check context.

domain-name

Cisco Talos

Cisco's comprehensive IP and domain reputation intelligence system with real-time threat detection spanning millions of sensors.

domain-name

Cisco Umbrella Popularity List

Domain popularity ranking based on Cisco Umbrella DNS telemetry.

domain-name

ClearWebStats.com

Public site-statistics index showing traffic and rank snapshots for domains.

domain-name

Criminal IP Search

Cyber threat intelligence search engine for exposed assets, domains, vulnerabilities, and risk indicators.

domain-name ip-mac-address

crt.sh - Certificate Search

CT log viewer aggregating certificate data from multiple Certificate Transparency logs. Search for all certificates ever issued to a domain to…

domain-name

Daily DNS Changes

DomainTools service monitoring DNS record changes across domains, detecting newly registered subdomains and tracking DNS infrastructure modifications.

domain-name

Deteque (R)

Real-time IP, domain, and threat intelligence from Spamhaus and abuse.ch alliance. Provides comprehensive malware, botnet, and abuse data with…

domain-name

DNS Dumpster

Free domain research tool that discovers hosts and subdomains related to a domain. Provides DNS record enumeration (MX, TXT, Host) with a visual map…

domain-name

DNS Recon (T)

Python-based DNS enumeration script supporting zone transfers, standard record enumeration, TLD expansion, DNS brute force, and PTR lookups.

domain-name

DNS Twist (T)

Domain name permutation engine for detecting homograph phishing attacks and typosquatting with fuzzy hashing.

domain-name

dnspop (T)

DNS reconnaissance utility for enumerating records and identifying domain-related infrastructure.

domain-name

DNSSEC Analyzer

Verisign's DNSSEC validation tool that checks the DNSSEC chain of trust for a domain.

domain-name

DNSstuff

Suite of free DNS and network tools providing lookups, DNS checks, and WHOIS information for domain reconnaissance.

domain-name

dnstwister

Web-based domain permutation tool with free lookup and paid monitoring plans for typosquatting detection.

domain-name

DNSViz

DNS and DNSSEC analysis platform that visualizes delegation chains and cryptographic validation paths. Helps diagnose trust and signing issues in…

domain-name

Domain Dossier

Free web-based tool that aggregates WHOIS, DNS, and network information for domains and IP addresses into a single consolidated report.

domain-name

Domaincrawler.com

Enterprise-grade domain database covering 1.4+ billion registered and unregistered domains with 80+ billion historical records since 2008. Used by…

domain-name

domainIQ

Comprehensive domain intelligence platform offering reverse lookups, ownership history, and related domain discovery. Trusted by government agencies,…

domain-name

DomainTools Whois

Enterprise-grade WHOIS API with decades of historical domain data and rapid query response. The industry leader for threat intelligence and domain…

domain-name

easyWhois

Free domain WHOIS lookup and DNS tools service. Now operated under the DomainHelp platform, providing domain registration information and DNS lookups.

domain-name

Email Domain Validation

Free email domain validation tool checking DNS records, MX records, and mail server connectivity.

domain-name

Ewhois

Web WHOIS lookup utility for registration, registrar, and nameserver details.

domain-name

EyeWitness (T)

Open-source tool for automated website screenshotting, service header collection, and default credential identification.

domain-name

Fierce Domain Scanner (T)

DNS reconnaissance tool focused on subdomain discovery and non-contiguous IP space mapping.

domain-name

Follow That Page

Website monitoring service that checks pages for changes and sends alerts when tracked content updates. Supports keyword-based notifications for…

domain-name

FortiGuard Reputation Service

Fortinet's IP reputation service aggregating malicious source IP data from global threat sensors and collaborators. Blocks botnets, DDoS sources, and…

domain-name

gdns (T)

Google DNS-focused command-line tool for DNS lookup and domain record exploration.

domain-name

Gobuster (T)

Multi-mode brute-force tool for DNS subdomain, virtual host, and directory discovery.

domain-name

Google's Certificate Transparency

Directory of all known Certificate Transparency logs monitored by Chrome and other browsers. Browse CT log records to discover issued certificates,…

domain-name

Google Safe Browsing API

Google's free API detecting malicious URLs and phishing sites with protection across billions of devices.

domain-name

Google Trends

Google's search trend analysis tool for tracking keyword popularity and comparing search interest over time.

domain-name search-engines

Hunting-New-Registered-Domains (T)

Open-source tool for identifying newly registered domains matching patterns, useful for phishing and brand threat detection.

domain-name

IP2WHOIS

Free WHOIS lookup service for domain names and IP addresses, providing registration details, registrant information, location data, and API access.

domain-name

Kraken (T)

Open-source reconnaissance utility for domain and network intelligence gathering workflows.

domain-name

MalwareURL (R)

Commercial malware URL reputation checker and blocklist service protecting networks from known malicious websites.

domain-name

MarkMonitor Whois Search

ICANN-accredited registrar and brand protection company offering WHOIS lookup and domain management services. Exclusively serves corporate clients…

domain-name

Mnemonic

Mnemonic's public PassiveDNS service providing historical and current DNS records collected from global sensor networks. Unauthenticated queries…

domain-name

Netlas.io

Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery…

domain-name ip-mac-address

OWASP Maryam (T)

Modular OWASP OSINT framework with footprinting and search modules for multi-source reconnaissance.

domain-name

Pentest-tools.com Subdomains

Web-based subdomain finder that enumerates subdomains for a given domain through hosted scanning.

domain-name

Recon-ng (T)

Full-featured web reconnaissance framework with independent modules for data gathering.

domain-name

Redirect Detective

Web tool that traces URL redirect chains and final destinations across multi-hop redirects.

domain-name

RobotsDisallowed

Curated wordlist of top disallowed paths harvested from robots.txt files across high-traffic websites.

domain-name

Robtex (R)

Comprehensive free DNS lookup and network intelligence tool with decade-spanning database containing billions of documents of internet data. Useful…

domain-name

scumware.org

Free malware and spyware tracking domain blacklist maintained by security community for 18+ years.

domain-name

SecLists DNS Subdomains (T)

Community-maintained DNS wordlist collection used to power subdomain brute-force workflows.

domain-name

SEMrush

SEO intelligence platform for domain analytics, keyword intelligence, backlinks, and competitor profiling.

domain-name

Shadowserver Foundation

Nonprofit providing comprehensive IP reputation intelligence and automated abuse reporting through daily network scanning.

domain-name

Shodan

Search engine for internet-exposed devices, services, and security-relevant banners.

domain-name ip-mac-address

SimilarWeb

Digital intelligence platform for traffic estimates, referrals, and audience insights.

domain-name

Sitediff (T)

Command-line utility for comparing website versions to detect content and structural changes.

domain-name

Siteliner

Website crawler that highlights duplicate content, broken links, and SEO quality issues.

domain-name

SiteSleuth

OSINT domain analytics tool tracking Google Analytics, AdSense, and Stripe keys across 32+ million websites.

domain-name

Sn1per (T)

Automated reconnaissance and penetration testing framework combining multiple scanning tools for full-scope target enumeration.

domain-name

StatsCrop

Website statistics portal with traffic rank snapshots and related metadata.

domain-name

Sucuri SiteCheck

Free remote website scanner that checks for malware, security threats, blacklisting, and vulnerabilities. Detects outdated CMS versions, insecure…

domain-name

SWITCH Internet Domains Whois (.ch)

Official Swiss domain registry WHOIS lookup service operated by SWITCH for .ch and .li country-code domains. Public registry with all owner contact…

domain-name

theHarvester (T)

Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.

cloud-infrastructure domain-name email-address

Trend Micro Site Safety Center

Free service that checks website safety ratings from Trend Micro's research and reputation sources. Identifies websites with malware, phishing…

domain-name

URL Void

Free website reputation checker that scans URLs against 30+ blocklist engines and reputation services. Detects fraudulent and malicious websites with…

domain-name

urlDNA

URL intelligence service for investigating domains, redirects, and related reputation indicators.

domain-name

UrlQuery.net

Free online URL scanner that analyzes webpages for malware, suspicious elements, and phishing threats. Provides comprehensive threat detection…

domain-name

urlscan.io

URL and domain analysis service that captures page loads, requests, and security-relevant artifacts.

domain-name ip-mac-address

Urlwatch

Open-source Python CLI tool for monitoring webpages and feeds for changes. Supports multiple filters, reporters, and scheduled checks via local…

domain-name

ViewDNS.info

Comprehensive DNS lookup and WHOIS service providing detailed DNS records, reverse IP lookups, reverse WHOIS searches, and API access for automated…

domain-name

Visual Site Mapper

Site-crawling mapper used to visualize website structure and page relationships.

domain-name

VisualPing

Website monitoring platform that alerts on page content or visual changes.

domain-name

vURL Online

URL and domain dissection tool providing detailed reputation analysis and security assessment.

domain-name

Wappalyzer

Technology detection platform and browser tooling for identifying frameworks, CMS, and SaaS usage.

domain-name

Wappalyzer (T)

Technology stack profiler that identifies CMS, frameworks, analytics, and infrastructure used by a website.

domain-name

Web Data Exposure Scanner (T)

Open-source scanner for detecting exposed web application data and sensitive file disclosures on web servers.

domain-name

Web Inspector Online Scan

Free cloud-based website malware scanner with daily automated scanning and blacklist checking capabilities.

domain-name

Webroot BrightCloud URL/IP Lookup

Web classification and reputation tool providing URL/IP threat and content analysis. Uses machine learning reputation scoring across 82 content…

domain-name

Website Informer

Free domain and website information aggregator providing visitor statistics, safety status, Alexa rankings, ownership data, and technical details…

domain-name

Where Does This Link Go?

Redirect-chain inspector that traces and visualizes final destination paths.

domain-name

Who.is

Comprehensive WHOIS and RDAP lookup service with large database of domain registration, DNS records, and IP information. Provides both current and…

domain-name

Whoisology

Searchable archive of billions of current and historical domain WHOIS records with cross-referencing capabilities. Designed for InfoSec, legal, and…

domain-name

Windows Defender Security Intelligence (WDSI)

Microsoft's security intelligence portal for reporting malicious URLs and checking Windows Defender threat assessments.

domain-name

Zone-H.org

Archive of reported website defacements and related incident metadata maintained by the Zone-H community.

domain-name

Zscaler Zulu URL Risk Analyzer

Free dynamic risk scoring engine for web content analysis. Assesses URLs from multiple perspectives: content analysis, URL patterns, and host…

domain-name