Domain, DNS & IP · open-source OSINT project
Subfinder
Fast passive subdomain enumeration using public sources and configured provider APIs.
View on GitHub ↗ Project homepage ↗
Before you use it
Passive sources are the safer default, but validation and follow-on tools can contact target infrastructure. Keep scope documented and use only authorized domains.
At a glance
| Category | Domain, DNS & IP |
|---|---|
| Provider | projectdiscovery |
| Accepted input | authorized domain |
| Access | Free |
| Privacy sensitivity | Moderate |
| Maintenance status | Active |
| Operating mode | Infrastructure lookup or analysis |
| License | MIT |
| GitHub stars | 14,352 |
| Repository last updated | 2026-09-01 |
| Last verified by OSINTCompass | 2026-09-01 |
Access and privacy
Access: Free
Open-source repository on GitHub. Local or self-hosted use may require API keys, accounts, models, or other third-party services.
Privacy sensitivity: Moderate
Infrastructure, case, or research queries may be logged by GitHub, APIs, model providers, or target services. Minimize identifiers and review scope.
Responsible use
- Prefer passive sources (certificate logs, historical DNS, reputation databases) before anything that touches the target directly.
- Record the date of every lookup — DNS, hosting, and WHOIS data change often.
- Port or vulnerability scanning is not passive research; only do it with written authorization.
Tags
Alternatives in Domain, DNS & IP
- Web-CheckAn all-in-one web application for reviewing a website's public technical, security, and privacy signals.
- AbuseIPDBA crowdsourced database of IP addresses reported for spam, brute-force attempts, and other abusive activity.
- CensysInternet intelligence for researching hosts, services, certificates, and publicly exposed infrastructure.
- crt.shSearches public Certificate Transparency logs to reveal certificates and hostnames associated with a domain.
- Cloud EnumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
- MetabigorOSINT power without API key hassle