Pricing

from $5.52 / 1,000 finding extracteds

Try for free

Go to Apify Store

theHarvester Domain OSINT Collector

Try for free

Collect source-attributed public certificate hostnames, resolved IPs, DNS aliases, and related URL candidates for recurring domain reconnaissance.

Pricing

from $5.52 / 1,000 finding extracteds

Rating

0.0

(0)

Developer

Stas Persiianenko

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

theHarvester OSINT Domain & Subdomain Collector API through CLI

The Apify CLI is the official tool that allows you to use theHarvester Domain OSINT Collector locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

theHarvester Domain OSINT Collector API in Python

theHarvester Domain OSINT Collector API in JavaScript

theHarvester Domain OSINT Collector OpenAPI definition

theHarvester Domain OSINT Collector API

theHarvester Domain OSINT - Subdomains, Hosts & Emails

ntriqpro/theharvester-osint

Map the public attack surface of any domain: discover subdomains, hosts, IP addresses and emails from free public OSINT sources (crt.sh, Certspotter, HackerTarget, DuckDuckGo). Powered by theHarvester. No setup, no API keys — for recon, bug-bounty and due diligence.

daehwan kim

Domain OSINT Recon

prooflio/domain-osint-recon

Aggregates WHOIS, DNS records, certificate-transparency subdomains and PTR records for a domain into one structured report.

Prooflio AI

5.0

Domain Checker — WHOIS, DNS & SSL Lookup API

vivid_astronaut/domain-checker

Check domain availability and fetch WHOIS records, DNS records, and SSL certificate details in one call. Supports bulk domain lists — useful for domain research, brand monitoring, and infrastructure audits.

BRAINIALL Team

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

anshumanatrey/theharvester-osint

Cloud-hosted theHarvester OSINT tool. Harvest emails, subdomains, IPs, URLs and ASNs from 54+ public sources (Shodan, Censys, crt.sh, VirusTotal, SecurityTrails, GitHub, hunter.io). Full CLI feature parity — DNS brute force, subdomain takeover, screenshots. $0.003 per record harvested.

Anshuman Atrey

Domain WHOIS & DNS Lookup - Bulk Domain Intelligence

santamaria-automations/domain-whois-dns

Bulk domain intelligence — WHOIS records (registrar, dates, contacts), DNS records (A, MX, TXT, NS), and email provider detection. Perfect for B2B prospecting, security audits, domain monitoring, and data enrichment.

NanoScrape

Domain Intelligence — DNS, WHOIS & SSL Bulk Lookup

weiseer/domain-intel-scraper

Bulk-enrich a list of domains with live DNS records, WHOIS registration, and SSL certificate details. One clean JSON row per domain.

wei seer

Domain Intelligence Suite

weeknds/domain-intelligence-suite

WHOIS, DNS, SSL, and subdomain intelligence for any domain in one run. Registration data, DNS records, SSL chain, subdomain discovery from CT logs. Essential for OSINT, security research, penetration testing, and domain due diligence.

C R

DNS, WHOIS, SPF/DMARC, SSL Domain Audit

jungle_synthesizer/dns-domain-audit

Bulk domain audit covering DNS records, WHOIS registration, SPF/DMARC/DKIM email auth, SSL certificate, and reverse DNS. No browser, no proxy -- pure Node, sub-second per domain.

BowTiedRaccoon

Bulk Domain Intelligence: WHOIS/RDAP, DNS, SSL, Availability

cottony_brittlegill/domain-intelligence-bulk

Bulk domain lookup: RDAP/WHOIS registration data, DNS records, SSL certificate and registration availability for up to 100k domains in one normalized JSON per domain. Failed lookups are never charged.