Skip to content
osint_verified✓

tools / builtwith

BuiltWith

Technology profiler for websites that shows the CMS, analytics, ad networks and hosting, plus a relationship tool linking sites by shared tracking IDs.

freemiumacct optionalapiwebextension

field note

The Relationships tab finds other sites sharing the same Google Analytics, AdSense or tag manager IDs, which is often how networks of sites get linked to one operator.

similar tools

host.iohost.io

Domain data API and lookup showing backlinks, redirects, co-hosted domains, and domains sharing the same analytics or tracking IDs.

freemiumacct optionalapi
domainip / asndetails
PublicWWWpublicwww.com

Source code search engine for web pages. Find every site containing a given snippet, analytics ID, script, or keyword in its HTML, JS or CSS.

freemiumacct optionalapi
keyworddomaindetails
Wappalyzerwappalyzer.com

Browser extension and lookup service that identifies technologies on websites, such as frameworks, CMS, analytics, CDNs and e-commerce platforms.

freemiumactiveacct optionalapiextension
domainurldetails
assetfindergithub.com

Minimal Go tool that finds domains and subdomains related to a given domain from CT logs, passive DNS and other public sources.

freeosscli
domaindetails
BBOTgithub.com

Recursive internet scanner that chains 100+ modules for subdomain enumeration, web spidering and email harvesting. Has a passive-only preset.

freeactiveosscli
domainip / asncompanydetails
C99 Subdomain Findersubdomainfinder.c99.nl

Free web-based subdomain finder that returns subdomains with their resolved IPs and Cloudflare status. Previous scans are browsable.

free
domaindetails
>esc
↑↓ navigate · ↵ open · Shift ↵ tool details