Domain, DNS & IP · OSINT tool
crt.sh
Searches public Certificate Transparency logs to reveal certificates and hostnames associated with a domain.
At a glance
| Category | Domain, DNS & IP |
|---|---|
| Provider | Sectigo |
| Accepted input | domain |
| Access | Free |
| Privacy sensitivity | Low |
| Last verified by OSINTCompass | 2026-08 |
Access and privacy
Access: Free
Public search interface; no account required.
Privacy sensitivity: Low
Certificate Transparency data is public. The query itself may still be logged by the service.
Responsible use
- Prefer passive sources (certificate logs, historical DNS, reputation databases) before anything that touches the target directly.
- Record the date of every lookup — DNS, hosting, and WHOIS data change often.
- Port or vulnerability scanning is not passive research; only do it with written authorization.
Tags
Alternatives in Domain, DNS & IP
- Web-CheckAn all-in-one web application for reviewing a website's public technical, security, and privacy signals.
- AbuseIPDBA crowdsourced database of IP addresses reported for spam, brute-force attempts, and other abusive activity.
- CensysInternet intelligence for researching hosts, services, certificates, and publicly exposed infrastructure.
- SubfinderFast passive subdomain enumeration using public sources and configured provider APIs.
- Cloud EnumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
- MetabigorOSINT power without API key hassle