🔍 Subdomain Finder

Check DNS propagation across 8 global resolvers (Google, Cloudflare, Quad9, OpenDNS). Supports A, AAAA, MX, TXT, CNAME, NS, SOA records. Detect inconsistencies after DNS changes.

Free Linkedin Company Finder - LinkedIn address From Any Site

s-r/free-linkedin-company-finder---linkedin-address-from-any-site

Find LinkedIn company pages for any domain name. This powerful actor searches and extracts LinkedIn company URLs for domains, supporting international LinkedIn subdomains and bulk processing. Perfect for sales teams, recruiters, and data enrichment.

Website Key Pages Finder

yummy_gelato/website-key-pages-finder

Find key pages (pricing, docs, status, security, privacy, terms) on any website. Crawls start URLs and returns structured URLs with confidence scores and evidence. Great for competitor analysis, lead enrichment, and audits.

Bulk Email MX Verifier

automation-lab/email-mx-verifier

Bulk verify email addresses via DNS MX lookup, syntax validation, and disposable domain detection. No external API — pure DNS. 99% margin, $0.0008/email. Returns risk level, MX records, provider, typo suggestions.

TikTok Shop Data Scraper

devcake/tiktok-shop-data-scraper

Extract TikTok Shop product data instantly - prices, reviews, seller info, and categories. The essential TikTok shop scraper for e-commerce sellers and dropshippers.

Subdomain Finder & Reverse IP

canadesk/subdomain-finder-reverse-ip

Enumerate Subdomains and Reverse IPs with RapidDNS, Anubis, AlienVault and crt.sh! It's fast and costs little.

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Real Subdomain Finder

onescales/real-subdomain-finder

Discover every subdomain for any domain. Queries 40+ OSINT sources including cert transparency, DNS archives & web scanners. Results enriched with DNS validation, HTTP probing, and subdomain takeover detection. No API keys required.

Subdomain Finder

automation-lab/subdomain-finder

This actor discovers subdomains by querying certificate transparency logs via crt.sh. It finds all SSL/TLS certificates ever issued for a domain, extracting unique subdomain names. This passive reconnaissance technique requires no direct scanning.