loading
Loading content
loading
OSINT
Look up a host on DNSDumpster.
overview
DNSDumpster Host Search asks DNSDumpster for the hostnames it already holds for a root domain and returns each one paired with its resolved IP. Because the data comes from DNSDumpster's own collection instead of a live scan, the lookup stays passive: the target sees no traffic from you.
Reach for it at the very start of recon, when you have a domain and want a first list of hosts to work from. Treat the results as a seed set, then hand them to active resolution or probing to confirm what is live and enrich the addresses. Coverage is bounded by what DNSDumpster has indexed, so pair it with other passive sources when you need breadth.
As a Trickest node it takes a single domain and writes a file plus a folder of host records, so it drops straight into a graph. Feed it a domain input, then wire its output into httpx to find live hosts or into dnsx to resolve and enrich what it returns.
source github.com/trickest
use cases
Search DNSDumpster for hostnames tied to a root domain to build a candidate list without querying the target's own infrastructure.
Use the hostname,IP pairs it returns to spot shared addresses, netblocks, and hosting patterns worth pivoting on before any active scan.
Use the returned hosts as the starting set that probing, resolution, and screenshotting stages expand from.
Combine DNSDumpster results with other passive finders so coverage does not depend on a single data source.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domain | STRING | · | Root domain to search DNSDumpster for. Passed positionally; the node exposes no other flags. |
Showing key inputs. dnsdumpster-host-search exposes 1 inputs in total.
example
# passive host lookup for a domain via DNSDumpsterdnsdumpster-host-search example.comwww.example.com,203.0.113.10mail.example.com,203.0.113.11blog.example.com,203.0.113.24api.example.com,198.51.100.20dev.example.com,198.51.100.21vpn.example.com,198.51.100.35autodiscover.example.com,203.0.113.11ns1.example.com,203.0.113.53guidance
Use DNSDumpster Host Search to gather hosts for a domain passively at the start of recon. For the domain's full DNS record set on the same service, use dnsdumpster-dns-lookup. To resolve or brute-force hosts actively, follow with dnsx or shuffledns.
Returns the domain's DNS records on the same service. This node focuses on hosts.
Aggregates many passive subdomain sources. DNSDumpster Host Search is a single-source lookup.
Actively resolves and enriches hosts. Pair it after this passive search.
faq
related
Look up DNS records on DNSDumpster.
Find lookalike domains adversaries use for typosquatting, phishing, and brand impersonation.
List all public repositories for valid GitHub usernames.
Look up the real IP of a host starting from its favicon and using Shodan.
Gather email account intelligence from public sources and check it against breach data.
Collect a dossier on a person by username across thousands of sites.
A domain feeds DNSDumpster Host Search, which returns associated hosts passively and passes them to httpx so only live hosts land as output.
Facts on this page come from the live Trickest tool library.