cookie
We use cookies

This website use cookies to give you the best, most relevant experience. By continuing to use this website you’re accepting this. If you wish to find out more, click this link (or by clicking the Privacy link at the bottom of any page)

Modules

Module
Description
Status
Link to module website

TotalHash.com

TotalHash.com

Check if a host/domain or IP is malicious according to TotalHash.com.
Free

malwaredomainlist.com

malwaredomainlist.com

Check if a host/domain, IP or netblock is malicious according to malwaredomainlist.com.
Free

PhishStats

PhishStats

Determine if an IP Address is malicious
Free

Amazon S3 Bucket Finder

Amazon S3 Bucket Finder

Search for potential Amazon S3 buckets associated with the target and attempt to list their contents.
Free

Github

Github

Identify associated public code repositories on Github.
Free

AlienVault IP Reputation

AlienVault IP Reputation

Check if an IP or netblock is malicious according to the AlienVault IP Reputation database.
Free

abuse.ch

abuse.ch

Check if a host/domain, IP or netblock is malicious according to abuse.ch.
Free

URLScan.io

URLScan.io

Search URLScan.io cache for domain information.
Free

Emerging Threats

Emerging Threats

Check if a netblock or IP is malicious according to emergingthreats.net.
Free

OpenDNS

OpenDNS

Check if a host would be blocked by OpenDNS DNS
Free

Open Passive DNS Database

Open Passive DNS Database

Obtain passive DNS information from pdns.daloo.de Open passive DNS database.
Free

BuiltWith

BuiltWith

Query BuiltWith.com's Domain API for information about your target's web technology stack, e-mail addresses and more.
Tiered

PhishTank

PhishTank

Check if a host/domain is malicious according to PhishTank.
Free

Venmo

Venmo

Gather user information from Venmo API.
Free

CleanTalk Spam List

CleanTalk Spam List

Check if a netblock or IP address is on CleanTalk.org's spam IP list.
Free

NameAPI

NameAPI

Check whether an email is disposable
Tiered

JsonWHOIS.com

JsonWHOIS.com

Search JsonWHOIS.com for WHOIS records associated with a domain.
Tiered

SHODAN

SHODAN

Obtain information from SHODAN about identified IP addresses.
Tiered

blocklist.de

blocklist.de

Check if a netblock or IP is malicious according to blocklist.de.
Free

HackerOne (Unofficial)

HackerOne (Unofficial)

Check external vulnerability scanning/reporting service h1.nobbd.de to see if the target is listed.
Free

Bambenek C&C List

Bambenek C&C List

Check if a host/domain or IP appears on Bambenek Consulting's C&C tracker lists.
Free

Pulsedive

Pulsedive

Obtain information from Pulsedive's API.
Tiered

Hybrid Analysis

Hybrid Analysis

Search Hybrid Analysis for domains and URLs related to the target.
Free

DuckDuckGo

DuckDuckGo

Query DuckDuckGo's API for descriptive information about your target.
Free

HaveIBeenPwned

HaveIBeenPwned

Check HaveIBeenPwned.com for hacked e-mail addresses identified in breaches.
Commercial
Visit Website
Commercial

IPQualityScore

IPQualityScore

Determine if target is malicious using IPQualityScore API
Tiered

Zetalytics

Zetalytics

Query the Zetalytics database for hosts on your target domain(s).
Tiered

CoinBlocker Lists

CoinBlocker Lists

Check if a host/domain or IP appears on CoinBlocker lists.
Free

Azure Blob Finder

Azure Blob Finder

Search for potential Azure blobs associated with the target and attempt to list their contents.
Free

CallerName

CallerName

Lookup US phone number location and reputation information.
Free

ARIN

ARIN

Queries ARIN registry for contact information.
Free

EmailRep

EmailRep

Search EmailRep.io for email address reputation.
Tiered

Bad Packets

Bad Packets

Obtain information about any malicious activities involving IP addresses found
Commercial
Visit Website
Commercial

Google Object Storage Finder

Google Object Storage Finder

Search for potential Google Object Storage buckets associated with the target and attempt to list their contents.
Free

spur.us

spur.us

Obtain information about any malicious activities involving IP addresses found
Commercial
Visit Website
Commercial

Yandex DNS

Yandex DNS

Check if a host would be blocked by Yandex DNS
Free

IntelligenceX

IntelligenceX

Obtain information from IntelligenceX about identified IP addresses, domains, e-mail addresses and phone numbers.
Tiered

ipstack

ipstack

Identifies the physical location of IP addresses identified using ipstack.com.
Tiered

BitcoinAbuse

BitcoinAbuse

Check Bitcoin addresses against the bitcoinabuse.com database of suspect/malicious addresses.
Free

numverify

numverify

Lookup phone number location and carrier information from numverify.com.
Tiered

Trumail

Trumail

Check whether an email is disposable
Free

Censys

Censys

Obtain information from Censys.io
Tiered

SecurityTrails

SecurityTrails

Obtain Passive DNS and other information from SecurityTrails
Tiered

Wikileaks

Wikileaks

Search Wikileaks for mentions of domain names and e-mail addresses.
Free

VoIPBL OpenPBX IPs

VoIPBL OpenPBX IPs

Check if an IP or netblock is an open PBX according to VoIPBL OpenPBX IPs.
Free

Onion.link

Onion.link

Search Tor 'Onion City' search engine for mentions of the target domain.
Free

grep.app

grep.app

Search grep.app API for links and emails related to the specified domain.
Free

ViewDNS.info

ViewDNS.info

Reverse Whois lookups using ViewDNS.info.
Tiered

Scylla

Scylla

Gather breach data from Scylla API.
Free

SpamCop

SpamCop

Query various spamcop databases for open relays, open proxies, vulnerable servers, etc.
Free

Quad9

Quad9

Check if a host would be blocked by Quad9
Free

XForce Exchange

XForce Exchange

Obtain IP reputation and passive DNS information from IBM X-Force Exchange
Tiered

multiproxy.org Open Proxies

multiproxy.org Open Proxies

Check if an IP is an open proxy according to multiproxy.org' open proxy list.
Free

Apility

Apility

Search Apility API for IP address and domain reputation.
Tiered

Whoisology

Whoisology

Reverse Whois lookups using Whoisology.com.
Commercial
Visit Website
Commercial

ProjectDiscovery Chaos

ProjectDiscovery Chaos

Search for hosts/subdomains using chaos.projectdiscovery.io
Commercial
Visit Website
Commercial

Bing

Bing

Obtain information from bing to identify sub-domains and links.
Tiered

DNSGrep

DNSGrep

Obtain Passive DNS information from Rapid7 Sonar Project using DNSGrep API.
Free

badips.com

badips.com

Check if an IP address is malicious according to BadIPs.com.
Free

MetaDefender

MetaDefender

Search MetaDefender API for IP address and domain IP reputation.
Tiered

Honeypot Checker

Honeypot Checker

Query the projecthoneypot.org database for entries.
Free

Psbdmp

Psbdmp

Check psbdmp.cc (PasteBin Dump) for potentially hacked e-mails and domains.
Free

Flickr

Flickr

Search Flickr for domains, URLs and emails related to the specified domain.
Free

Clearbit

Clearbit

Check for names, addresses, domains and more based on lookups of e-mail addresses on clearbit.com.
Tiered

Talos Intelligence

Talos Intelligence

Check if a netblock or IP is malicious according to talosintelligence.com.
Free

BotScout

BotScout

Searches botscout.com's database of spam-bot IPs and e-mail addresses.
Tiered

Hunter.io

Hunter.io

Check for e-mail addresses and names on hunter.io.
Tiered

Zone-H Defacement Check

Zone-H Defacement Check

Check if a hostname/domain appears on the zone-h.org 'special defacements' RSS feed.
Free

Debounce

Debounce

Check whether an email is disposable
Free

Digital Ocean Space Finder

Digital Ocean Space Finder

Search for potential Digital Ocean Spaces associated with the target and attempt to list their contents.
Free

VXVault.net

VXVault.net

Check if a domain or IP is malicious according to VXVault.net.
Free

Comodo

Comodo

Check if a host would be blocked by Comodo DNS
Free

Google SafeBrowsing

Google SafeBrowsing

Check if the URL is included on any of the Safe Browsing lists.
Free

AdBlock Check

AdBlock Check

Check if linked pages would be blocked by AdBlock Plus.
Tiered

Leak-Lookup

Leak-Lookup

Searches Leak-Lookup.com's database of breaches.
Free

Skymem

Skymem

Look up e-mail addresses on Skymem.
Free

Fringe Project

Fringe Project

Obtain network information from Fringe Project API.
Free

AbuseIPDB

AbuseIPDB

Check if an IP address is malicious according to AbuseIPDB.com blacklist.
Tiered

BinaryEdge

BinaryEdge

Obtain information from BinaryEdge.io Internet scanning systems, including breaches, vulnerabilities, torrents and passive DNS.
Tiered

Host.io

Host.io

Obtain information about domain names from host.io.
Tiered

Fraudguard

Fraudguard

Obtain threat information from Fraudguard.io
Tiered

Certificate Transparency

Certificate Transparency

Gather hostnames from historical certificates in crt.sh.
Free

MalwarePatrol

MalwarePatrol

Searches malwarepatrol.net's database of malicious URLs/IPs.
Tiered

C99

C99

Queries the C99 API which offers various data (geo location, proxy detection, phone lookup, etc).
Commercial
Visit Website
Commercial

Greensnow

Greensnow

Check if a netblock or IP address is malicious according to greensnow.co.
Free

CloudFlare Malware DNS

CloudFlare Malware DNS

Check if a host would be blocked by CloudFlare Malware-blocking DNS
Free

EmailCrawlr

EmailCrawlr

Search EmailCrawlr for email addresses and phone numbers associated with a domain.
Tiered

AlienVault OTX

AlienVault OTX

Obtain information from AlienVault Open Threat Exchange (OTX)
Tiered

RiskIQ

RiskIQ

Obtain information from RiskIQ's (formerly PassiveTotal) Passive DNS and Passive SSL databases.
Tiered

Fortiguard.com

Fortiguard.com

Check if an IP is malicious according to Fortiguard.com.
Free

NeutrinoAPI

NeutrinoAPI

Search NeutrinoAPI for IP address info and check IP reputation.
Tiered

malwaredomains.com

malwaredomains.com

Check if a host/domain is malicious according to malwaredomains.com.
Free

Darksearch

Darksearch

Search the Darksearch.io Tor search engine for mentions of the target domain.
Free

Ahmia

Ahmia

Search Tor 'Ahmia' search engine for mentions of the target domain.
Free

ipregistry

ipregistry

Query the ipregistry.co database for reputation and geo-location.
Tiered

MySpace

MySpace

Gather username and location from MySpace.com profiles.
Free

Koodous

Koodous

Search Koodous for mobile apps.
Free

EmailFormat

EmailFormat

Look up e-mail addresses on email-format.com.
Free

CommonCrawl

CommonCrawl

Searches for URLs found through CommonCrawl.org.
Free

SpyOnWeb

SpyOnWeb

Search SpyOnWeb for hosts sharing the same IP address, Google Analytics code, or Google Adsense code.
Tiered

Instagram

Instagram

Gather information from Instagram profiles.
Free

HackerTarget

HackerTarget

Search HackerTarget.com for hosts sharing the same IP.
Free

Onyphe

Onyphe

Check Onyphe data (threat list, geo-location, pastries, vulnerabilities) about a given IP.
Tiered

Blockchain

Blockchain

Queries blockchain.info to find the balance of identified bitcoin wallet addresses.
Free

LeakIX

LeakIX

Search LeakIX for host data leaks, open ports, software and geoip.
Free

SlideShare

SlideShare

Gather name and location from SlideShare profiles.
Free

Google Maps

Google Maps

Identifies potential physical addresses and latitude/longitude coordinates.
Tiered

TextMagic

TextMagic

Obtain phone number type from TextMagic API
Tiered

Watchguard

Watchguard

Check if an IP is malicious according to Watchguard's reputationauthority.org.
Free

Spamhaus

Spamhaus

Query the Spamhaus databases for open relays, open proxies, vulnerable servers, etc.
Free

Wikipedia Edits

Wikipedia Edits

Identify edits to Wikipedia articles made from a given IP address or username.
Free

Twilio

Twilio

Obtain information from Twilio about phone numbers. Ensure you have the Caller Name add-on installed in Twilio.
Tiered

RIPE

RIPE

Queries the RIPE registry (includes ARIN data) to identify netblocks and other info.
Free

cybercrime-tracker.net

cybercrime-tracker.net

Check if a host/domain or IP is malicious according to cybercrime-tracker.net.
Free

Whoxy

Whoxy

Reverse Whois lookups using Whoxy.com.
Commercial
Visit Website
Commercial

OpenStreetMap

OpenStreetMap

Retrieves latitude/longitude coordinates for physical addresses from OpenStreetMap API.
Free

Spyse

Spyse

SpiderFoot plug-in to search Spyse API for IP address and domain information.
Tiered

Social Media Profile Finder

Social Media Profile Finder

Tries to discover the social media profiles for human names identified.
Tiered

BGPView

BGPView

Obtain network information from BGPView API.
Free

Bing (Shared IPs)

Bing (Shared IPs)

Search Bing for hosts sharing the same IP.
Tiered

Bitcoin Who's Who

Bitcoin Who's Who

Check for Bitcoin addresses against the Bitcoin Who's Who database of suspect/malicious addresses.
Tiered

FullContact

FullContact

Gather domain and e-mail information from FullContact.com API.
Tiered

Internet Storm Center

Internet Storm Center

Check if an IP is malicious according to SANS ISC.
Free

Google

Google

Obtain information from the Google Custom Search API to identify sub-domains and links.
Tiered

CleanBrowsing.org

CleanBrowsing.org

Check if a host would be blocked by CleanBrowsing.org DNS
Free

OpenPhish

OpenPhish

Check if a host/domain is malicious according to OpenPhish.com.
Free

Mnemonic PassiveDNS

Mnemonic PassiveDNS

Obtain Passive DNS information from PassiveDNS.mnemonic.no.
Free

Open Bug Bounty

Open Bug Bounty

Check external vulnerability scanning/reporting service openbugbounty.org to see if the target is listed.
Free

PasteBin

PasteBin

PasteBin search (via Google Search API) to identify related content.
Tiered

VirusTotal

VirusTotal

Obtain information from VirusTotal about identified IP addresses.
Tiered

WhatCMS

WhatCMS

Check web technology using WhatCMS.org API.
Tiered

OpenCorporates

OpenCorporates

Look up company information from OpenCorporates.
Tiered

Greynoise

Greynoise

Obtain information from Greynoise.io's Enterprise API.
Tiered

Onionsearchengine.com

Onionsearchengine.com

Search Tor onionsearchengine.com for mentions of the target domain.
Free

ThreatCrowd

ThreatCrowd

Obtain information from ThreatCrowd about identified IP addresses, domains and e-mail addresses.
Free

IPInfo.io

IPInfo.io

Identifies the physical location of IP addresses identified using ipinfo.io.
Tiered

UCEPROTECT

UCEPROTECT

Query the UCEPROTECT databases for open relays, open proxies, vulnerable servers, etc.
Free

Snov

Snov

Gather available email IDs from identified domains
Tiered

Twitter

Twitter

Gather name and location from Twitter profiles.
Free

DroneBL

DroneBL

Query the DroneBL database for open relays, open proxies, vulnerable servers, etc.
Free

NetworksDB

NetworksDB

Search NetworksDB.io API for IP address and domain information.
Tiered

Keybase

Keybase

Obtain additional information about target username
Free

CIRCL.LU

CIRCL.LU

Obtain information from CIRCL.LU's Passive DNS and Passive SSL databases.
Free

WiGLE

WiGLE

Query WiGLE to identify nearby WiFi access points.
Free

F-Secure Riddler.io

F-Secure Riddler.io

Obtain network information from F-Secure Riddler.io API.
Commercial
Visit Website
Commercial

Iknowwhatyoudownload.com

Iknowwhatyoudownload.com

Check iknowwhatyoudownload.com for IP addresses that have been using BitTorrent.
Tiered

Gravatar

Gravatar

Retrieve user information from Gravatar API.
Free

Maltiverse

Maltiverse

Obtain information about any malicious activities involving IP addresses
Free

Archive.org

Archive.org

Identifies historic versions of interesting files/pages from the Wayback Machine.
Free

DNSDB

DNSDB

Query FarSight's DNSDB for historical and passive DNS data.
Tiered

Robtex

Robtex

Search Robtex.com for hosts sharing the same IP.
Free

ThreatMiner

ThreatMiner

Obtain information from ThreatMiner's database for passive DNS and threat intelligence.
Free

SORBS

SORBS

Query the SORBS database for open relays, open proxies, vulnerable servers, etc.
Free