urlscan.iourlscan.io
Sandbox that loads a URL and records the requests, IPs, domains, screenshots and DOM. Its search across millions of past scans is a pivot goldmine.
urldomainip / asndetails
tools / gowitness
gowitness
Headless-Chrome screenshot tool for large lists of URLs, with a local web UI to triage results and track changes.
freeactiveosscli
opsec warning
This tool is active: it interacts directly with the target's infrastructure or may otherwise reveal your interest to the target. Use a research environment and weigh the risk before running it.
used in playbooks
similar tools
httpxgithub.com
HTTP probing toolkit that checks which hosts are live and grabs titles, status codes, tech stack, TLS details and favicon hashes in bulk.
domainip / asnurldetails
Netcraft Site Reportsitereport.netcraft.com
Hosting history, netblock owner, nameserver, SSL and technology report for any site. Netcraft has tracked hosting since the 1990s.
domainurldetails
VirusTotalvirustotal.com
Scans files, URLs, domains and IPs against 70+ engines. The relations graph shows passive DNS, communicating files, subdomains and historical WHOIS.
file / docurldomainip / asndetails
Wappalyzerwappalyzer.com
Browser extension and lookup service that identifies technologies on websites, such as frameworks, CMS, analytics, CDNs and e-commerce platforms.
domainurldetails
AlienVault OTXotx.alienvault.com
LevelBlue (formerly AT&T) Open Threat Exchange. Community threat pulses, passive DNS and indicator lookups for IPs, domains, hashes and URLs.
ip / asndomainfile / docurldetails