SecurityTrails
Current DNS records and subdomain inventory from SecurityTrails.
SecurityTrails on the free API returns live DNS (A, AAAA, MX, NS, TXT) and a subdomain list for a hostname. WHOIS, reverse WHOIS, reverse IP, and historical lookups are not included on this plan.
Capabilities
- Current DNS records with first-seen dates and shared-IP counts
- Subdomain inventory for the queried hostname (first page, free-tier cap)
Data
SecurityTrails’ homepage, checked 22 September 2026, publishes 630 million domains, 2.6 billion hostnames, 4.2 billion historical WHOIS records, and 10.19 trillion historical DNS lookups. This integration returns current DNS and the first page of subdomains. It does not return that WHOIS or DNS history.
What you get back
- DNS overview with A/MX/NS/TXT
- Filterable subdomain list
UI workflow
Open SearchIn and choose Domain.
Select SecurityTrails as the provider.
Review current DNS first, then filter subdomains.
Sample queries
| Input type | Query | Notes |
|---|---|---|
domain | example.com | Current DNS + subdomains |
Pricing
domain $0.50
Best for
- Checking a domain's live DNS footprint
- Enumerating known subdomains without a paid SecurityTrails plan
How it works & why through OSINTverse
How the request runs
- 1Choose domain and select SecurityTrails.
- 2SearchIn pulls the current DNS record set — A, AAAA, MX, NS, and TXT — with first-seen dates and shared-IP counts.
- 3It also requests the subdomain inventory for that hostname.
- 4Results render as a DNS overview plus a filterable subdomain list, with raw JSON kept on the record.
Coverage. SecurityTrails publishes 630 million domains, 2.6 billion hostnames, 4.2 billion historical WHOIS records, and 10.19 trillion historical DNS lookups. This integration returns current DNS and the first page of subdomains from the free API.
Why route SecurityTrails through OSINTverse
- ·No SecurityTrails plan to buy — run a one-off DNS and subdomain check for $0.50.
- ·DNS records and subdomains render as a filterable inventory next to your WHOIS and breach results.
- ·Subdomain hits become graph nodes you can pivot into Whoxy, WhoisXML, or breach providers.
| SecurityTrails directly | Through OSINTverse | |
|---|---|---|
| Getting started | SecurityTrails gates WHOIS, reverse lookups, and historical data behind paid plans; free keys cover current DNS and a first page of subdomains. | Sign in, top up from $10, and run SecurityTrails the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — SecurityTrails starts at $0.50 for domain lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |
One wallet, no subscriptions
Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.
Failed searches are refunded
If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
One API for every source
The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
Cases and pivot graph
Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
Team wallets and controls
Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
Exports built in
Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.
Good to know
- This integration runs on the free SecurityTrails surface: current DNS and the first page of subdomains only.
- WHOIS, reverse WHOIS, reverse IP, and historical DNS are not available here — use Whoxy or WhoisXML instead.
API example
$0.50 per query. The Example tab is free sample data. The Try it tab runs a real search and charges the active workspace wallet at the same rates as the dashboard.
A records
1
93.184.216.34
Subdomains
3
Hostname inventory
Alexa rank
120
Current popularity
curl -X POST "https://apiv1.osintverse.com/v1/search" \ -H "Content-Type: application/json" \ -H "x-api-key: ov_your_api_key" \ -d '{"provider":"securitytrails","input_type":"domain","query":"example.com"}'Invalid provider + input_type pairs return HTTP 422. Confirm combinations with GET /v1/providers or the pricing matrix.
Run this in the SearchIn UI or create an API key. Full HTTP reference: search workflow. Marketing overview: SecurityTrails integration.