Investigate any domain, nameserver, or IP across 12 intelligence tools.

Enter any domain above and pick a check, or choose a specialized lookup below.

One-Stop Domain & Infrastructure Reconnaissance

Investigating a domain rarely stops at a single lookup. A suspicious registration leads to its nameservers; a nameserver leads to sibling domains; an A record leads to an IP address and the Autonomous System (ASN) behind it. Instead of jumping between ten different tabs, DomainKits connects registration records, live DNS, Certificate Transparency logs, security flags, and network data into one toolkit, in your browser, with most lookups also available to AI agents.

12 Tools
Registration, DNS, network & security
RDAP & Live DNS
Queried on demand
CT Logs & 250M+
Subdomain & Reverse NS index
MCP & Skills
AI agent ready

When to Use Tools vs. Search

Use Domain Tools when you already have a specific target (a domain name, IP address, AS number, or IANA ID) and want to inspect its records from every angle. Use Domain Search when you start with a keyword and want to discover matching domains across 360M+ active domains, plus newly registered, expired, and for-sale records.

Frequently Asked Questions

How are the 12 DomainKits tools organized, and which one should I start with?

Rather than listing tools in isolation, our 12 utilities are grouped around four common investigation workflows:

  • Registration & Lifecycle State: Start with Domain WHOIS to check creation dates, expiry, and locks. Use Registrar Check to look up the registrar's IANA ID and likely parent operator, and Status Code Guide to decode EPP status strings like clientHold or pendingDelete.
  • DNS & Network Infrastructure: Run DNS Check to query live A, MX, TXT, and NS records. Pivot to IP Lookup and ASN Lookup to identify the server's geolocation, hosting provider, and CIDR network blocks, or use Reverse NS to find other domains sharing the same nameserver or nameserver pair.
  • Brand Security & Attack Surface: Use Typosquat Scanner to detect registered lookalike and homoglyph variations of your brand, Subdomain Finder (and Hostname Search) to uncover subdomains from Certificate Transparency logs, and Safety Check to screen for malware or phishing flags.
  • SEO & Backlink Valuation: Before acquiring an aged or expiring domain, run it through Backlinks Checker to evaluate referring domains, backlink volume, top linking TLDs, and spam score.

How do you pivot across tools to investigate a suspicious or high-value domain?

Experienced analysts and domain investors rarely rely on a single data point. Combining signals across multiple tools reveals patterns that individual lookups miss:

  • From Single Domain to Full Portfolio (WHOIS → Reverse NS): When you find a domain parked on custom nameservers or a specific Cloudflare NS pair in WHOIS, pivoting those nameservers into Reverse NS ("Also on") surfaces sibling domains that share the same nameserver setup.
  • Uncovering Origin Servers Behind CDNs (Subdomains + DNS → IP/ASN): When a root domain sits behind a proxy CDN, checking its MX mail records in DNS Check or scanning its historical subdomains in Subdomain Finder can expose direct origin IP addresses and the underlying hosting ASN.
  • Validating Brand Impersonation (Typosquat → DNS + Safety): A registered typo domain is a passive risk until it is configured. Checking whether a lookalike domain has MX records (able to receive email) or A records (pointing to a live server) tells you which lookalikes to act on first.
  • Pre-Acquisition Due Diligence (WHOIS + Status + Backlinks): Before bidding on an expiring domain, check its link profile in Backlinks Checker, decode its drop stage in Status Code Guide, and see in Registrar Check whether its current registrar is flagged as a drop-catching service.

Where does the tool data come from, and is it privacy-compliant?

Each tool queries its own sources: registration metadata comes from official RDAP registries and ICANN/IANA records; DNS records are resolved live on demand; subdomain records come from Certificate Transparency (CT) logs; network data comes from the MaxMind GeoLite2 database; and safety flags come from third-party indexes. DomainKits focuses on technical infrastructure and domain-level signals. In line with GDPR, we do not collect or share registrant data.

Can my AI assistant run these domain tools automatically?

Yes. DomainKits MCP gives AI assistants (such as Claude, Cursor, and custom agents) access to most of these tools through natural conversation. Your AI selects and calls the right lookup based on your prompt. Pair MCP with Agent Skills to let your AI run multi-step workflows (like running a typosquat scan, checking live DNS on each match, and summarizing the domains worth reviewing), or integrate directly via our REST API.

Do I need an account to use DomainKits Tools?

Guest access is open across all tools with daily lookup quotas. A free account unlocks higher daily limits and more filters, and pricing shows what each plan includes.