OSINT/Explorer
Full search app →

Corporate Profiling & Website OSINT

71 tools for Corporate Profiling & Website OSINT, covering Corporate Lookup Tools, Technical Artefacts, Brand Metrics, Sanctions, Industry Tracking & World Leaders, and 1 more.

Brand Metrics

Brand24

brand24.com

Social listening platform tracking brand mentions, sentiment and hashtag performance across 25 million+ online sources

web-toolfreemiumkeywordcompany

CrowdTangle (discontinued)

crowdtangle.com

Meta's public-content monitoring tool for tracking posts and engagement on Facebook and Instagram pages/groups

web-toolsocialkeywordRetired

Meta Ad Library

facebook.com

Searchable archive of active and past ads run on Facebook and Instagram, filterable by advertiser, country and ad category

databasefreecompanykeyword

Twiangulate

twiangulate.com

Compares two Twitter/X accounts to find shared followers and audience overlap

web-toolfreeusernamesocial

Company Registries

SEC EDGAR

sec.gov

US Securities and Exchange Commission's full-text and company search over public filings, including 10-Ks, proxy statements, and ownership disclosures.

databasefreecompanydocumentUS

Corporate Lookup Tools

Business credit and identity database built around the D-U-N-S Number, covering company ownership, credit risk and financials

databasefreemiumcompany

ICIJ Offshore Leaks Database

offshoreleaks.icij.org

Searchable database of 810,000+ offshore entities from the Panama Papers, Paradise Papers, Bahamas Leaks and Offshore Leaks investigations

databasefreecompanyperson

OCCRP Aleph Pro

aleph.occrp.org

Investigative-data search platform that cross-references leaked archives, corporate registries and government records to trace beneficial ownership, financial flows and persons of interest.

databasefree-registrationcompanypersondocument

OCCRP's Aleph-powered search across leaked documents, court records and company registries for company and individual profiles

databasefree-registrationcompanyperson

OffshoreAlert

offshorealert.com

News and court-filing archive on fraud, asset recovery and offshore finance, with a paid Red Flag intelligence database

databasefreemiumcompanyperson

Sanctions, Industry Tracking & World Leaders

EU Business Registers Directory

e-justice.europa.eu

EU e-Justice portal directory linking to the official business registers of each EU member state plus Iceland, Liechtenstein and Norway

directoryfreecompanyEU

OFAC Sanctions List Search

sanctionssearch.ofac.treas.gov

Official OFAC search of the SDN List and other US Treasury sanctions lists with fuzzy name matching

searchfreepersoncompanyUS

OpenSanctions

opensanctions.org

Open database of sanctions lists, watchlists and politically exposed persons aggregated from 460+ sources, nearly 2 million entities

databasefreemiumpersoncompany

Tech Inquiry's Influence Explorer maps government procurement and lobbying data linking companies to Five Eyes and EU government contracts

databasefreecompanykeyword

Technical Artefacts

.au WHOIS Lookup

whois.auda.org.au

Official WHOIS service for .au domain names, run by Identity Digital on behalf of auDA

web-toolfreedomainAU

Blacklight (The Markup)

themarkup.org

Scans a website in real time and lists the ad trackers, analytics pixels and third-party tracking technologies it loads

web-toolfreedomain

BrowserLeaks - My IP Address

browserleaks.com

Shows your public IP, geolocation, ISP, and browser/TLS/TCP fingerprint details for network diagnostics

web-toolfreeip

BuiltWith

builtwith.com

Looks up the technology stack (CMS, analytics, hosting, ecommerce, ads) a given website runs on

web-toolfreemiumdomain

Censys

search.censys.io

Internet-wide scanning platform searchable by host, certificate, or web-property attributes to map exposed services and TLS infrastructure.

searchpaidipdomain

CentralOps Domain Dossier

centralops.net

Free browser-based network utilities: WHOIS, traceroute, nslookup, dig and ping, plus a combined Domain Dossier report

web-toolfreedomainip

CentralOps Network Tools

centralops.net

Free browser-based network utilities: WHOIS, traceroute, nslookup, dig and ping, plus a combined Domain Dossier report

web-toolfreedomainip

changedetection.io (hosted)

changedetection.io

Monitors web pages for changes and restocks, alerting via Slack, Discord, email and other channels when content updates

web-toolpaiddomain

Criminal IP

criminalip.io

Threat-intelligence search engine combining internet-wide scan data, malicious IP scoring, and exposed asset search.

searchfreemiumipdomain

crt.sh

crt.sh

Certificate Transparency log search engine; look up a domain or organization to enumerate its issued TLS certificates and subdomains.

searchfreedomain

CyberChef

gchq.github.io

Browser-based data manipulation toolkit for encoding, decoding, hashing, encryption and format conversion via drag-and-drop recipes

softwarefreedocumentkeyword

DNSDumpster

dnsdumpster.com

Passive DNS reconnaissance tool that maps hosts, subdomains and DNS records related to a domain

web-toolpaiddomain

DNSlytics

dnslytics.com

Reverse IP, WHOIS, and ad/analytics-ID lookup tool used to pivot between domains sharing hosting or tracking infrastructure.

searchfreemiumdomainip

DomainTools Whois Lookup

whois.domaintools.com

WHOIS and domain-availability lookup, with paid membership unlocking deeper infrastructure-mapping tools for attacker profiling

web-toolfreemiumdomainip

DomScan

domscan.net

Unified domain-intelligence API and web console that aggregates WHOIS/RDAP, DNS records, SSL certificate data and subdomains for a target domain in a single query.

web-toolfreemiumdomain

EasyCounter Site Report

easycounter.com

Site profile tool showing traffic estimates, keywords, hosting history, WHOIS ownership and social-media stats for a domain

web-toolfreedomain

FOFA

fofa.info

Internet asset search engine indexing device banners, favicon hashes, and certificates, with strong coverage of Asian infrastructure.

searchfreemiumipdomain

GreyNoise Community

viz.greynoise.io

Free IP lookup that tells you whether an address is internet background noise (mass scanners) or a benign known service, cutting alert triage time.

web-toolfreemiumip

Hosting Checker

hostingchecker.com

Looks up which hosting company, IP address and blacklist status a website uses, with domain age and WHOIS data

web-toolfreedomain

Hunt.io

hunt.io

Threat-hunting search engine indexing internet-wide JARM/JA4T fingerprints, favicon hashes and HTTP response bodies to pivot from one malicious host to an operator's full infrastructure.

web-toolfreemiumipdomain

Hunter.how

hunter.how

Internet-asset search engine for exposed hosts and devices, searchable by IP, domain, port, product, or certificate.

searchfreemiumipdomain

I Know What You Download

iknowwhatyoudownload.com

Looks up torrent download activity historically associated with a given IP address

web-toolfreeip

ipctl.io

ipctl.io

ASN, BGP route and netblock-ownership lookup tool for tracing an IP or prefix back to its announcing network and upstream providers.

web-toolfreemiumipdomain

Shows your public IP address plus geolocation, ASN/network owner and VPN/proxy/Tor detection

web-toolfreemiumip

ipinfo.io

ipinfo.io

IP geolocation and ASN/company lookup API returning city-level location, hosting provider, ASN, VPN/proxy and abuse-contact data for a given IP address.

apifreemiumip

JARM (Salesforce)

github.com

Open-source active TLS server fingerprinting scanner that hashes ten crafted Client Hello responses to cluster servers by TLS stack, useful for spotting C2 frameworks like Cobalt Strike.

softwarefreedomainip

LeakIX

leakix.net

Search engine indexing exposed services, misconfigurations, and leaked data discovered through internet-wide scanning.

searchfree-registrationipdomain

Netcraft Site Report

netcraft.com

Site-report and hosting-history tool showing a domain's hosting provider, server technology, and uptime history, also used for phishing-takedown intel.

web-toolfreemiumdomain

Netlas.io

netlas.io

Internet-scanning and intelligence platform for host responses, DNS, WHOIS, and certificate data across billions of indexed hosts.

searchfreemiumipdomain

ONYPHE

onyphe.io

Cyber-defense search engine indexing internet scan data, passive DNS, and threat-intelligence feeds, operated from the EU.

searchfreemiumipdomainEU

OpenPhish

openphish.com

Aggregated feed of active phishing URLs with trend stats on targeted brands, sectors and hosting ASNs

feedfreemiumdomainip

Standardized successor to WHOIS; query a domain, IP block, or ASN to get structured registration data straight from the authoritative registry.

apifreedomainip

Robtex

robtex.com

Free DNS and network intelligence tool aggregating whois, reverse DNS, and autonomous-system routing data for domains and IPs

web-toolfreedomainip

RPKI Validator / RIPE RPKI Dashboard

rpki-validator.ripe.net

Checks whether an IP prefix has a valid Route Origination Authorization (ROA), flagging BGP hijacks and unauthorized route announcements for a given ASN or netblock.

web-toolfreeip

ScanSearch

scansearch.net

On-demand internet scanning search engine that runs fresh Nmap-grade port/service scans against a target IP or domain rather than relying only on a stale historical database.

web-toolfreemiumipdomain

searchcode.com

searchcode.com

Instant code-intelligence dossiers (languages, tech stack, complexity, security findings) for any public GitHub repository

searchfreekeyworddomain

SecurityHeaders

securityheaders.com

Free scanner that grades a website's HTTP response headers for security misconfigurations.

web-toolfreedomain

SecurityTrails

securitytrails.com

Historical DNS and domain-intelligence database for WHOIS history, passive DNS, and infrastructure changes over time.

databasepaiddomainip

Shodan

shodan.io

Search engine indexing banners from internet-connected devices, queried by IP, service, product, or geography to find exposed servers, cameras, and industrial systems.

searchpaidipdomain

urlscan.io

urlscan.io

Sandboxed scanner that loads a URL and records its network requests, resources, screenshots and DOM for analysis

web-toolfreemiumdomain

ViewDNS.info Tools

viewdns.info

Hub of free domain and IP lookup tools including WHOIS, reverse IP, DNS records and port scanning

web-toolfreedomainip

Wappalyzer

wappalyzer.com

Technology-profiling tool that identifies the CMS, frameworks, analytics, and other software running behind a given website.

web-toolfreemiumdomain

Web Check

web-check.as93.net

Open-source scanner that pulls DNS, WHOIS, headers, TLS certificate, hosting and tracker data for a domain in one report

web-toolfreedomain

Who.is

who.is

WHOIS/RDAP lookup for domains and IPs, plus DNS records, nameserver lookup and domain history

web-toolfreedomainip

WHOIS lookup showing owner/contact details for a domain or IP and whether a domain is registered

web-toolfreedomainip

Whois.com Lookup

whois.com

Domain and IP WHOIS lookup showing registrant, registrar, dates and nameserver details, plus availability checks

web-toolfreedomainip

WhoisFreaks

whoisfreaks.com

WHOIS, DNS, subdomain, IP reputation and geolocation intelligence APIs and feeds for domains and IPs

apiapi-keydomainip

WhoisXML API

whoisxmlapi.com

Commercial WHOIS, passive DNS, IP geolocation and threat-intelligence data feeds and APIs for domains and IPs

apipaiddomainip

Whoxy Whois Lookup

whoxy.com

WHOIS lookup and historical WHOIS records for a domain, with JSON/XML output via a paid API

web-toolfreemiumdomain

ZoomEye

api.zoomeye.ai

Chinese internet-scanning search engine indexing device fingerprints, open ports, and web application banners, queried with dork-style syntax.

searchfreemiumipdomain