SecurityTrails

DNS history and domain intelligence for scoped investigations

Best for Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.
Workflow Enrichment
Pricing / access Paid · SaaS
Last verified 2026-05-07

Claims and corrections are reviewed before public profile changes.

Signal summary

  • VendorSecurityTrails
  • PlatformPlatform coverage varies by tool.
  • Reviewed2026-05-19

Trust / disclosure

How to read this profile

Editorial

Editorial line

Editorial judgment and commercial context stay separate on OSINT4ALL.

Review status

Hands-on notes or editorial review dates are attached where available.

Claims / submissions

Corrections and claim requests are reviewed before any public change is made.

Commercial context

No commercial relationship is disclosed on this profile.

Editorial verdict

Use case and fit

This is editorial guidance, not vendor copy.

Best for

Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.

Editorial read

Strong domain due-diligence and cyber triage source when paired with archive, certificate, and page-level evidence.

Overview

Best for domain research that needs DNS history, subdomains, WHOIS/RDAP-adjacent context, and API-friendly pivots.

Operational snapshot

Workflow, access, and coverage

WorkflowEnrichment
PricingPaid
AccessSaaS
RegionsGlobal
LanguagesEnglish
StatusStatus under review
Recommended workflow

Check current DNS first, compare historical records by date, remove shared-provider noise, then pivot only from records that match the investigation timeline.

Language notes

Interface is English-first; domain data is global and may require local registry or language context.

Limits

Strengths, caveats, and risk

Strengths

Good bridge between a domain clue and a wider web-footprint or infrastructure review.

Limitations

Historical DNS can create too many weak pivots if dates and hosting context are ignored.

Does not prove current ownership, attribution, compromise, or malicious intent from DNS history alone.

Risk note

Old DNS, parked domains, shared providers, and hosting migrations can make unrelated assets look connected.

Treat domain history as public technical context, and avoid publishing personal registration details unless there is a clear editorial basis.

Trust note

Use DNS history as dated infrastructure context; avoid ownership or attribution language without additional evidence.

Alternatives

Alternatives

RiskIQ PassiveTotal for deeper passive-DNS pivots, crt.sh for certificate discovery, DNSDumpster and ViewDNS.info for lighter domain checks, and Censys or Shodan for host exposure context.

Maintenance

Last verified & suggest an update

Help keep this profile accurate. Update requests are reviewed and logged before publication.

Last verified: 2026-05-07

If something is outdated, please submit a correction or verified update request. Claim requests are reviewed and do not grant editorial control.

Commercial or sponsorship requests use the separate partner workflow.

Claim / Correct Listing