ThreatMiner

Threat IntelligenceDomain OSINTIP IntelligenceHash Lookup

Manual evidence reviewed
Checked 9/3/2026

ThreatMiner provides a web interface and JSON API for pivoting among passive DNS, WHOIS, related samples, certificates, report tags, and other threat-intelligence relationships. It is a research index, so associations should be corroborated before operational use.

Open Tool Docs Report incorrect information

Features

✓Domain and IP pivots
✓Malware-hash lookups
✓Report and certificate relationships

Limitations

✗API is limited to 10 queries per minute
✗Indexed relationships can be historical and require corroboration

Related Tools

📧

Have I Been Pwned

Email OSINT

Check whether an email address appears in breaches indexed by Have I Been Pwned.

◆ FreemiumWEB●Beginner

Open Tool Details →

🌍

SecurityTrails

Domain OSINT

Historical DNS data, IP history, subdomain enumeration, and WHOIS for any domain.

◆ FreemiumWEB●Intermediate

Open Tool Details →

🌐

Censys

IP Intelligence

Internet-wide scanning for hosts, certificates, and attack surface analysis.

◆ FreemiumWEB●Intermediate

Open Tool Details →

Tool Details

Interface WEB

Pricing Free

Skill Level Intermediate

Open Source No ✗

Maintenance Reported active

Reported Update 2026-08

Platforms

🌐 web

Accepts Input Types

domainipv4

ThreatMiner

Features

Limitations

Related Tools

Have I Been Pwned

SecurityTrails

Censys

Tool Details

Platforms

Accepts Input Types

Tags