Subdomain intelligence for external attack surface research.
02
Built by Daniel Matsumoto.
Security researcher and developer, publishing as c3l3si4n.
03
Product scope.
Subdomain search
Query domains and export discovered names.
Bucket search
Search supported public cloud storage providers.
API access
Generate keys and use bearer-token requests.
04
Corpus context before you search.
3.8B tracked names
The current index contains 3,764,270,539 observed DNS names available for search.
26.1% end in .com
.com accounts for 982,489,018 tracked names, making it the largest familiar ending in the dataset.
29.5% use .com, .net, or .org
Together, those three endings cover 1,109,371,563 tracked names.
8.4M point to localhost
The DNS value index includes 8,384,911 records pointing at 127.0.0.1, ::1, or localhost.