Pricing

from $5.52 / 1,000 finding extracteds

Try for free

Go to Apify Store

theHarvester Domain OSINT Collector

Try for free

Collect source-attributed public certificate hostnames, resolved IPs, DNS aliases, and related URL candidates for recurring domain reconnaissance.

Pricing

from $5.52 / 1,000 finding extracteds

Rating

0.0

(0)

Developer

Stas Persiianenko

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

Changelog

0.1.0

Added batch collection of public Cert Spotter certificate hostnames for submitted root domains.
Added source-attributed certificate IDs, issuers, observed dates, and query URLs.
Added optional A, AAAA, and CNAME enrichment with resolved IP and related URL candidate fields.
Added bounded limits, retries, input validation, and typed dataset output.
Email discovery, credentialed sources, brute force, active scanning, and URL reachability checks are not included.

theHarvester Domain OSINT - Subdomains, Hosts & Emails

ntriqpro/theharvester-osint

Map the public attack surface of any domain: discover subdomains, hosts, IP addresses and emails from free public OSINT sources (crt.sh, Certspotter, HackerTarget, DuckDuckGo). Powered by theHarvester. No setup, no API keys — for recon, bug-bounty and due diligence.

daehwan kim

Domain OSINT Recon

prooflio/domain-osint-recon

Aggregates WHOIS, DNS records, certificate-transparency subdomains and PTR records for a domain into one structured report.

Prooflio AI

5.0

Domain Checker — WHOIS, DNS & SSL Lookup API

vivid_astronaut/domain-checker

Check domain availability and fetch WHOIS records, DNS records, and SSL certificate details in one call. Supports bulk domain lists — useful for domain research, brand monitoring, and infrastructure audits.

BRAINIALL Team

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

anshumanatrey/theharvester-osint

Cloud-hosted theHarvester OSINT tool. Harvest emails, subdomains, IPs, URLs and ASNs from 54+ public sources (Shodan, Censys, crt.sh, VirusTotal, SecurityTrails, GitHub, hunter.io). Full CLI feature parity — DNS brute force, subdomain takeover, screenshots. $0.003 per record harvested.

Anshuman Atrey

Domain WHOIS & DNS Lookup - Bulk Domain Intelligence

santamaria-automations/domain-whois-dns

Bulk domain intelligence — WHOIS records (registrar, dates, contacts), DNS records (A, MX, TXT, NS), and email provider detection. Perfect for B2B prospecting, security audits, domain monitoring, and data enrichment.

NanoScrape

Domain Intelligence — DNS, WHOIS & SSL Bulk Lookup

weiseer/domain-intel-scraper

Bulk-enrich a list of domains with live DNS records, WHOIS registration, and SSL certificate details. One clean JSON row per domain.

wei seer

Domain Intelligence Suite

weeknds/domain-intelligence-suite

WHOIS, DNS, SSL, and subdomain intelligence for any domain in one run. Registration data, DNS records, SSL chain, subdomain discovery from CT logs. Essential for OSINT, security research, penetration testing, and domain due diligence.

C R

DNS, WHOIS, SPF/DMARC, SSL Domain Audit

jungle_synthesizer/dns-domain-audit

Bulk domain audit covering DNS records, WHOIS registration, SPF/DMARC/DKIM email auth, SSL certificate, and reverse DNS. No browser, no proxy -- pure Node, sub-second per domain.

BowTiedRaccoon

Bulk Domain Intelligence: WHOIS/RDAP, DNS, SSL, Availability

cottony_brittlegill/domain-intelligence-bulk

Bulk domain lookup: RDAP/WHOIS registration data, DNS records, SSL certificate and registration availability for up to 100k domains in one normalized JSON per domain. Failed lookups are never charged.