IP Void

IP Void is a comprehensive IP address and domain analysis platform that aggregates reputation data, blacklist checks, WHOIS information, geolocation, DNS records, and other intelligence about any queried IP address or domain. It combines multiple lookup types in a single interface to reduce the number of individual tools needed for IP investigation.

For OSINT investigators, IP Void's aggregated multi-check approach is its primary advantage. A single IP Void query simultaneously checks the target IP against multiple spam and malware blacklists, retrieves ASN and organization data, shows the PTR (reverse DNS) record, provides geolocation, and displays the abuse contact — all presented in a consolidated report.

The blacklist check component queries IP Void's database of spam, malware, phishing, and abuse-related blocklists to determine whether a target IP is currently flagged by security services. Being listed on multiple blocklists with recent timestamps is a strong indicator of active malicious use, while a clean record across all lists suggests a lower risk profile.

WHOIS and ASN data from IP Void places the IP in its organizational context — identifying the registered network block owner, the country of registration, and the ISP responsible for the address. This organizational attribution is the starting point for understanding who controls the infrastructure and who to contact for legal process.

The PTR record (reverse DNS) provides the hostname associated with an IP address. Descriptive hostnames frequently reveal the purpose or operator of a server — mail.company.com indicates a mail server, vpn.organization.net indicates VPN infrastructure. Even generic hostnames like static.123.45.67.89.isp.com confirm the hosting provider.

IP Void's domain analysis mode provides equivalent analysis for domain names: WHOIS data, DNS records, SSL certificate information, and blacklist status across domain-specific reputation databases.

For investigations requiring broad IP and domain intelligence, IP Void reduces tool-switching overhead and ensures that blacklist status, WHOIS, and geolocation are always checked together.

Record all queried IPs and domains, the full IP Void report output, and query timestamps for case documentation.