Domain & IP Enumeration
Last updated
Last updated
A domain, in the context of networking and cybersecurity, is an area of the internet that's controlled by a specific entity or organization. It's most commonly understood as the part of a website's URL that identifies it uniquely on the web. For instance, in the URL "," "example.com" is the domain. Domains are organized in a hierarchical structure with top-level domains (TLDs) like ".com", ".org", ".net", etc., at the top, followed by second-level domains (like "example" in "example.com"), and potentially further subdivisions.
Domains are essential for the functioning of the internet, providing human-readable addresses for websites and services. They play a crucial role in cybersecurity, as understanding and managing the domain landscape of an organization is key to securing its digital presence and assets.
Whois Lookup - Retrieves crucial registration details about a domain, including the owner's contact info, registration date, and registrar.
- Provides DNS and network information, including shared hosting and reverse DNS.
- Offers a suite of network diagnostic tools, including DNS checks, MX record lookups, and blacklist checks.
- Provides a range of DNS and networking tools, including reverse Whois, IP location, and DNS report.
- Offers a comprehensive set of tools for DNS and network diagnostics, including DNS report, WHOIS lookup, traceroute, and more.
- A tool for visualizing the status of a DNS zone. It’s particularly useful for diagnosing DNSSEC issues but provides a detailed representation of any domain's DNS.
- Provides comprehensive information about domains, including current and historical WHOIS records, reverse WHOIS, IP tools, and more.
- Checks the health and configuration of DNS and provides a detailed report of any found problems or issues.
- A suite of tools for querying the DNS and other network diagnostics.
ThreatCrowd - A search engine for threats, providing data on domains, IPs, and more, including subdomains.
OpenSSL - is a robust, full-featured open-source toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It can be used for certificate enumeration among other things.
- Enumerates subdomains using search engines and various services.
- Discovers DNS servers, MX records, and subdomains related to a domain.
- Uses a variety of techniques including querying public data sources and passive DNS to enumerate subdomains. While it can perform active scanning, it also has a passive mode that strictly uses external data sources.
- Collects data about internet assets, including a comprehensive list of subdomains for a given domain.
- A search engine for certificates, crt.sh lets you look up SSL/TLS certificates issued for a given domain or IP address by querying the public Certificate Transparency logs.
- This tool by Qualys SSL Labs checks the validity and chain of trust of SSL/TLS certificates for a domain.
- CertSpotter monitors Certificate Transparency logs to notify you when new certificates are issued for your domains, helping detect misissued certificates and prevent phishing.
- Google's Certificate Transparency project aims to fix structural flaws in the SSL certificate system by providing an open framework for monitoring and auditing SSL certificates.
- Offers historical data about domains, DNS records, subdomains, and associated IPs.
- Views archived versions of web pages to understand past content and configurations.
- Provides information on the technology used by a domain, its hosting history, and risk ratings.
- To determine the technology stack of a website, including web servers, frameworks, analytics tools, and more.