Domain, DNS & WHOIS
Tools that look up domains, DNS records, certificates and registration history, and that enumerate the subdomains of a domain.
Amass
In-depth attack-surface mapping and asset discovery via DNS enumeration and network recon.
DNSDumpster
Free domain research tool that maps a domain's subdomains and hosts.
DomainTools
Domain intelligence platform with WHOIS history, reverse WHOIS and DNS pivoting for investigating who is behind a domain.
MxToolbox
Web diagnostics for DNS, MX, SPF/DKIM/DMARC, blacklist and SMTP checks on a domain or IP.
SecurityTrails
Historical DNS, WHOIS and subdomain data for domains and IP addresses.
Subfinder
Fast passive subdomain discovery tool that enumerates valid subdomains for a domain.
ViewDNS.info
Collection of free DNS, WHOIS, reverse-IP and network lookup tools.
Waymore
Pulls a domain's archived URLs from the Wayback Machine and other sources for recon.
Whoxy
WHOIS lookup and reverse-WHOIS history, including registrant-name search.
crt.sh
Searches Certificate Transparency logs to enumerate a domain's certificates and subdomains.
dnstwist
Generates and checks domain permutations to detect typosquatting and phishing lookalikes.