CyberTOOLBELT (CTB) is a comprehensive set of tools designed to make investigations regarding domains, IP addresses and other related information as cost effective, user-friendly and efficient as possible. CyberTOOLBELT has many features that are not available anywhere else at any price. Example: Can your existing tool search all domain names where the domain name contains pixel and any of the contacts are located in New York and was registered in the last week? CyberTOOLBELT can! Typically in less than a few seconds.
CyberTOOLBELT is exceedingly cost effective and eliminates hours of searching the web using stand-alone tools. The results are comprehensive. CTB is more than a set of tools, it is an investigative platform supporting dossiers and data sharing.
CyberTOOLBELT is available with a ten-day free trial Bronze plan. If you like it and/or find that it saves you money and time you can easily convert to a paid subscription — which at a entry level of $11.95 per month is the best ROI on the planet. Just think, if it saves you 20 minutes a month (or 1 minute a day) it more than pays for itself!
You can also access CyberTOOLBELT data using a RESTful API at significantly higher data usage limits at a very reasonable cost (including on-premises Whois data for unlimited access). Contact sales for details.
Sometimes, stats just speak for themselves. We figured we'd show you what $11.95 a month buys you and you can tell us if it is worth the price. We performed a domain lookup in CyberTOOLBELT for CyberTOOLBELT.com and then tried to gather the same information through Googling and visiting free tools. The search was performed by a senior in-house analyst. Here are the results:
|Using CyberTOOLBELT.com||Using the Web|
|Task Completion Time||7 seconds||9 minutes, 25 seconds|
|Number of related IPs found||5||2|
|Number of subdomains found||20||1|
|Number of Whois records found||1 (plus 86 change records)||1|
|Number of unique email addresses found||2||2|
|Number of name servers found||2||2|
|Number of mail servers found||1||1|
|Number of sites used||1||8|
|Ability to explore connections, perform related lookups with two mouse clicks; perform full-text searches of Whois data||Yes||No|
Could we have kept going and found more information using the web? Sure. Are there paid tools out there that can get you what we provided? Maybe some of it, but not all of it. That's because our data features subdomain information — information that others don't have and Google only sometimes catches. So why spend time using several different resources what you can get done on one screen? Give CyberTOOLBELT a try for free today and see how we can start saving you time in your investigations.
This is a brief overview of what some of our tools do with some short video demonstrations/tutorials.
CyberTOOLBELT's Domain Toolbelt section is core of what we have to offer. It contains a multitude of features that allow an investigator to quickly find and understand the information sought. Each tool has a unique lookup capability that allows for deeper investigation and drill-down capabilities. Remember that the tools described are just a fraction of what we have to offer.
Often times, an investigation starts only with a domain name and nothing more. CyberTOOLBELT makes it easy to learn a lot about the domain in a very short period of time, with current and historic information available in a single view. Enter a domain, and CyberTOOLBELT will return related email addresses, name servers, DNS records, related IP information, subdomains for the domain, registrar information, and available whois records. Consider this example screenshot:
Each menu item expands to show all the information CyberTOOLBELT has on the domain. For example, expanding the Related IP Details section shows that CyberTOOLBELT has a number of IP addresses related to it. You can also see what other domains are related to that same IP by clicking on the "xxx Domains Hosted". We also present any geo-location information that we know about as shown here:
Find something of interest? CyberTOOLBELT lets you drill down into the information even further. Text in blue has an interaction option, allowing users to take additional action. For example, if you wanted to drill down on additional information about a domain you would click/tap on the domain name and an action menu would pop up as shown here:
This is just a sample of the data and capabilities of CyberTOOLBELT. For additional information, watch the short videos below. More information and tutorials are available after you've logged in. Sign up for a free trial to get started today.
We released version 1.8 of CTB on January 8th, 2016. This release contains a number of speed-ups and enhancements as well as a new Person Search tool. You can find out information about a person's social media presence by their email address, telephone number, Facebook username or ID, or their Twitter handle. 2 new tools and our first cut of our dossier subsystem.
We released version 1.7 of CTB on December 9th, 2015. This release contains 2 new tools and our first cut of our dossier subsystem. One of the new tools allows you to compare up to five domains at a time for common data points such as infrastructure, ownership, etc. Many enterprise level features such as intel tagging were added. As usual, a number of optimizations, speedups and new information reporting was added (IE: Proxy IPs are now flagged).
We released version 1.6.2 of CyberTOOLBELT on November 13th, 2015. This is a maintenance release. A couple of bugs and display issues were fixed.
We released version 1.6 of CTB on October 9th, 2015. This release contains 4 new tools and our first cut of reporting domain issues. One of the new tools is a Twitter conversation capture. Another maps a web site and shorws you all the links. In addition a number of optimizations, speedups and new information reporting was added (IE: Tor nodes are now flagged).
On October 29, 2015 we released version 1.1 of CyberINTEL Reports. This release added our new Reverse Whois report which allows you to use full-text searching as well as a search wizard to find Whois records.
A number of tweaks were made to further refine some of the existing reports.
The new CyberINTEL platform was released (powered by CyberTOOLBELT®) on October 14th, 2015.
CyberINTEL Reports is a new "analyst-in-a-box" platform designed to allow users to get comprehensive reports at a very reasonable price. Reports can be customized with your logo and company name.
Find all the domains registered to an email address, if the name exists at common free email providers, if the address is valid or invalid, if it matches handles on social media sites, and more.
Upload an .EML or .MSG file or copy and paste an email and we will perform a complete analysis of the email: breaking down all domains, IP address and email information, checking for malicious domains and much more.
Need to investigate a website? This report will return an in-depth examination of the domain, its IP address, Whois information, common infrastructure, and much more. We also report issues with the domain. This report will give you a complete a picture of the domain as possible in plain English.
IP Address Report
This report will return everything we know about the IP address in question including domains hosted on it, ASN information, geo location, cross check with various blacklists, and more.
Batch Whois Lookup
Get fresh Whois on a list of as many domains as you want, fully parsed and ready for further analysis by you. Returned as a spreadsheet.
A number of other tweaks were made to clean up data presentation. A full list of changes will appear in the next newsletter.
We released version 1.5 on September 15th, 2015 with a number of new tools, new data presentations, fixes, changes, etc. This release includes 4 new social media monitoring tools. Issue #17 of our newsletter has complete details.
We released version 1.4 on August 3rd, 2015 with 2 new tools. One tool is used to examine shortened URLs and the other provides a batch HTTP lookup capability. Issue #16 of our newsletter has complete details.
We released version 1.3 on July 6, 2015 with 2 new tools. The tools return either all the domains related to an MX server or all the domains that we know are hosted on a particular name server. We've added over a dozen informative/instructional videos and are adding 2-3 a week. Many changes were made to make the RESTful API easier to use and more powerful. In addition, we are now exposing IP Whois data through the API. Issue #15 of our newsletter has complete details.
Farsight security is using our Whois engine to power a number of features of their products. See their data sheet for details.
We released version 1.2 May 13, 2015 with 2 new tools. The new CallerID tool allows you to lookup more in-depth information about a telephone number than the WhitePages tool introduced in the previous release. There was also a tool added to perform subdomain name searches. Issue #14 of our newsletter has complete details.
We were granted US trademark status for the CyberTOOLBELT name.
We released version 1.1 at the end of April, 2015 with 6 new tools. You can do people, business, address and telephone number searches for entities in the United States or Canada, perform IP address Whois lookups, monitor web pages for keywords, search passive DNS for searches using the Farsight Securities DNSDBtm database, and taking web page snapshots. Issue #13 of our newsletter has complete details.
Experts say that detecting fake websites needs to be a part of all companies' security protection. CyberTOOLBELT provides a great tool that allows you to monitor across all TLDs (new and old) for new domains related to your company. Read the full article by Warwick Ashford of ComputerWeekly.com here.
CTB is a cost effective tool and reduces time spent searching the web for standalone sites that compile the information separately. It is a one-stop platform for handling certain areas of investigation. One great tool is the "Tell Me When" tool is used to monitor parked content pages and alerts when the domain has real content on the site. You can elect to take a snapshot of the page when the content is detected. This is also an option for monitoring domain keywords. CTB can automatically perform this operation when a domain has matched one of your keywords and starts hosting content. This is powerful for brand protection. Tracking web pages is easy with the "Track Web Pages Tool" which is used to monitor Web site changes, log the changes and then sends a notification email. Another interesting tool is the "Verify Email Address" tool which verifies an email address to determine if the user exists at that email provider. CTB has removed the tedious searching and created an environment where I am confident in the results. With these tools there is less "shifting sand" and more "Yes, I can do this for you!"
Kim Miller, ABD, MSCJ, CFE
Subject Matter Expert
I love the tools and really appreciate the quick support when I ran into a problem.
(name and company withheld by request)
The following are up and coming webinars. Please sign up to attend.
2015 CyberTOOLBELT Product Review. January 28th, 2015 at 2pm EST. Presenters: Tom Brennan, CyberTOOLBELT. Register now! https://attendee.gotowebinar.com/register/4759428859235720193
This webinar will demonstrate the product and teach you how to use the tool. After registering, you will receive a confirmation email containing information about joining the webinar.
CyberTOOLBELT maintains a "news of the day" newsletter/feed that aggregates information related to the domains, dns, security and all related items. Click here to view the Newsfeed
Click on one of the following links to display the corresponding CyberTOOLBELT datasheet.
|4,111,718,129||Items related to Domains|
|432,068,642||Subdomains (not counting www)|
|234,753,408||Domains with Whois Information|
|41,901||Registrars and Resellers|
|458,905,713||Whois Record Updates|
CyberTOOLBELT's pricing is simple and you can change your plan at any time.
Each plan varies by the quantity of "limits" and "monitors." A "limit" is a query made using one of our tools. Each time a user does a phone number lookup, domain keyword search, email verification, whois query, etc., each count as one query. So, a bronze plan gives you 50 queries per day, or 750 over a one month period. Monitoring has a cap per plan. Keyword monitors are for watching when domains with a certain keyword are registered. Domain monitors watches for changes to a website. Web page Keyword Monitors look for changes to specific pages.
CyberTOOLBELT also features an Enterprise level, sold in groups of 5 users. Enterprise level subscriptions come with even higher limits and priority support. We also feature API access to our data which provides an even better value. Please contact us for additional information.
Interested in the features or the data but not in doing the work yourself? Please contact us and see how we can help. We have 15+ analysts on staff all skilled in internet investigations.
CyberTOOLBELT offers you a no-risk, no-cost way to click the tires by offering a free ten-day Bronze plan. If you like using CTB during the trial period or you find it saves you time and gives you features other systems/tools don't then you can easily sign-up for a paid subscription. As you can see above, our subscription rates are almost criminally inexpensive.
Click here to signup for a free trial. Simply select Free Trial as your plan option on the signup form and you'll be good to go!
(p.s: You don't need a credit card for the trial)
PO Box 384
Stroudsburg, PA 18360