SharkDNS Live Query
Subdomains
Collect public subdomain observations from certificate and DNS datasets.
No rows yet
Search a domain to collect public subdomain observations.
How This Query Works
Subdomain discovery aggregates passive public feeds and keeps hostnames under the target root zone.
Input should be one root domain such as example.com.
Only in-scope hosts ending with the target root are retained.
Source labels help compare confidence across public datasets.
Root-zone ScopeDeduplicated HostsInventory
Related Guides
Short articles explaining when and why to use this query.
Subdomain discovery for asset inventory
4 min readUse public subdomain data to build a cleaner domain inventory and find exposed hosts.
What is DNS lookup used for?
4 min readUse DNS lookup to inspect records, verify routing, troubleshoot mail, and compare public DNS visibility.
Reverse IP lookup explained
3 min readFind domains observed on the same IPv4 address and understand shared hosting or infrastructure relationships.