Netlasnetlas.io
Internet scan search engine covering hosts, DNS, WHOIS and certificates, with an attack surface discovery graph and a generous free tier.
ip / asndomaindetails
tools / dnsx
dnsx
Multi-purpose DNS toolkit for bulk resolving, record querying, wildcard filtering and subdomain brute-forcing.
freeactiveosscli
field note
Resolving names only queries public resolvers, but brute-force mode can hit the target's authoritative nameservers at scale. Pipe subfinder output into it to keep only live hosts.
opsec warning
This tool is active: it interacts directly with the target's infrastructure or may otherwise reveal your interest to the target. Use a research environment and weigh the risk before running it.
similar tools
Robtexrobtex.com
DNS and IP relationship lookup covering forward and reverse DNS, shared nameservers and mail servers, ASN data and graphs of related hosts.
domainip / asndetails
ViewDNS.infoviewdns.info
Swiss-army collection of DNS tools including reverse IP, reverse WHOIS, IP history, DNS records, reverse MX/NS and port checks.
domainip / asnemailreal namedetails
BBOTgithub.com
Recursive internet scanner that chains 100+ modules for subdomain enumeration, web spidering and email harvesting. Has a passive-only preset.
domainip / asncompanydetails
Censyssearch.censys.io
Internet-wide scan data on hosts, services and certificates, with a powerful query language. Strong for certificate pivoting and finding related infrastructure.
ip / asndomaincompanydetails
Criminal IPcriminalip.io
Threat-focused internet asset search engine with IP and domain risk scoring, exposed services, vulnerabilities and screenshot reports.
ip / asndomaindetails