Domain intelligence
SecurityTrails OSINT integration
Current DNS records and subdomain inventory from SecurityTrails.
SecurityTrails on the free API returns live DNS (A, AAAA, MX, NS, TXT) and a subdomain list for a hostname. WHOIS, reverse WHOIS, reverse IP, and historical lookups are not included on this plan. SecurityTrails’ own site publishes a wider corpus — 630 million domains, 2.6 billion hostnames, 4.2 billion historical WHOIS records, and 10.19 trillion historical DNS lookups — which this integration does not return.
How the SecurityTrails integration works
What happens between pressing run and reading a result.
- 1Choose domain and select SecurityTrails.
- 2SearchIn pulls the current DNS record set — A, AAAA, MX, NS, and TXT — with first-seen dates and shared-IP counts.
- 3It also requests the subdomain inventory for that hostname.
- 4Results render as a DNS overview plus a filterable subdomain list, with raw JSON kept on the record.
Data sources
The totals below are SecurityTrails’ published corpus. SearchIn calls the free API: current DNS records and the first page of subdomains for one hostname.
- Domains tracked
- 630 million
- Historical DNS lookups
- 10.19 trillion
- Homepage checked
- 22 September 2026
SecurityTrails also publishes 2.6 billion hostnames and 4.2 billion historical WHOIS records. Those historical and WHOIS datasets are not what this SearchIn integration returns.
Supported inputs & pricing
Prices are USD. LeakRadar includes 1,000 credential unlocks in the query price, then $0.50 per extra 1,000. OSINT Industries is $0.60 plus optional premium modules at $1.80. Other integrations are flat per query. Full SearchIn rates are on pricing.
| Input type | Price |
|---|---|
| Domaindomain | $0.50 |
Why run SecurityTrails through OSINTverse
You can always buy SecurityTrails directly. Here is what changes when the same data comes through SearchIn instead. Full write-up: OSINTverse vs SecurityTrails.
| SecurityTrails directly | Through OSINTverse | |
|---|---|---|
| Getting started | SecurityTrails gates WHOIS, reverse lookups, and historical data behind paid plans; free keys cover current DNS and a first page of subdomains. | Sign in, top up from $10, and run SecurityTrails the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — SecurityTrails starts at $0.50 for domain lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |
What every integration inherits
Good to know
Constraints worth reading before you spend a query.
This integration runs on the free SecurityTrails surface: current DNS and the first page of subdomains only.
WHOIS, reverse WHOIS, reverse IP, and historical DNS are not available here — use Whoxy or WhoisXML instead.
Going direct still makes sense at sustained high volume on a single source. SecurityTrails gates WHOIS, reverse lookups, and historical data behind paid plans; free keys cover current DNS and a first page of subdomains. Through SearchIn you trade that commitment for per-query pricing across 17 integrations.
How to access SecurityTrails
Sample queries
Investigations that use SecurityTrails
- OSINT for cybersecurity teamsBreach, host, and identity intel on one prepaid desk — no vendor seat tax.
- OSINT for corporate risk and securityVendor, insider, and brand exposure checks without stacking OSINT subscriptions.
- SearchIn for OSINT analystsEvery provider behind one search — pivots, bulk jobs, and cases that stick.
- SearchIn for threat intelligence analystsInfrastructure, leaks, and actor identifiers without vendor portal fatigue.
Related integrations
FAQ
SecurityTrails on OSINTverse, answered
How do I use SecurityTrails in SearchIn?
Open SearchIn and choose Domain. Select SecurityTrails as the provider. Review current DNS first, then filter subdomains.
How do I call SecurityTrails from the OSINTverse API?
Authenticate with an x-api-key header, then POST /v1/search with provider "securitytrails" and a supported input_type (domain). Poll GET /v1/search/{id} if the job returns running.
What does SecurityTrails cost on SearchIn?
Domain: $0.50. You see the price before every run, and there is no subscription.
Why use OSINTverse instead of SecurityTrails directly?
SecurityTrails gates WHOIS, reverse lookups, and historical data behind paid plans; free keys cover current DNS and a first page of subdomains. On OSINTverse you pay per query from one prepaid USD wallet with no subscription, failed searches are refunded automatically, results are normalised into a case graph you can pivot into other sources, and the same POST /v1/search contract reaches every integration. No SecurityTrails plan to buy — run a one-off DNS and subdomain check for $0.50. DNS records and subdomains render as a filterable inventory next to your WHOIS and breach results. Subdomain hits become graph nodes you can pivot into Whoxy, WhoisXML, or breach providers.
What are the limits of SecurityTrails on SearchIn?
This integration runs on the free SecurityTrails surface: current DNS and the first page of subdomains only. WHOIS, reverse WHOIS, reverse IP, and historical DNS are not available here — use Whoxy or WhoisXML instead.
Run SecurityTrails alongside every other source
One login, one prepaid wallet, and the price shown before every lookup.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days