What is Profundis DNS Search?

Profundis DNS Search is a comprehensive DNS records database that indexes billions of DNS records from public sources including passive DNS, Certificate Transparency logs, IANA data, and internet archives. It allows you to search for A, AAAA, CNAME, MX, TXT, NS, SOA records and track historical DNS changes over time. This is essential for subdomain enumeration, infrastructure mapping, and security research.

How do I search for DNS records on Profundis?

Use the host: filter with wildcards to find DNS records. For example: 'host:*.example.com' finds all subdomains, 'host:*.example.com AND type:A' finds only A records. You can filter by record type: type:A (IPv4 addresses), type:AAAA (IPv6), type:CNAME (aliases), type:MX (mail servers), type:TXT (text records), type:NS (nameservers), type:SOA (zone authority). Combine filters with AND/OR: 'host:*.example.com AND (type:A OR type:CNAME)'.

What DNS record types does Profundis support?

Profundis indexes all common DNS record types: A records (IPv4 addresses), AAAA records (IPv6 addresses), CNAME records (canonical names/aliases), MX records (mail exchange servers), TXT records (text data including SPF, DKIM, domain verification), NS records (nameservers), and SOA records (start of authority). You can search for specific record types using the type: filter or view all record types for a domain.

Does Profundis show historical DNS data?

Yes! Profundis stores DNS records indefinitely and never deletes data. You can track how a domain's DNS configuration changed over time, including IP address changes, nameserver migrations, and subdomain additions/removals. However, as Profundis is relatively recent, very old historical data may be limited. The system ingests approximately 30-50 million DNS records daily, continuously building historical intelligence.

How can I find all subdomains of a domain?

Use wildcard search with 'host:*.example.com' to enumerate all discovered subdomains. This searches across all DNS record types including Certificate Transparency logs, which often reveal subdomains not found through traditional DNS enumeration. For even more comprehensive results, use the dedicated Subdomain Enumeration tool which combines multiple data sources including certificates, passive DNS, and archived data.

What is the difference between DNS Search and Hosts Search?

DNS Search focuses on DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) and shows the raw DNS configuration and historical changes. Hosts Search focuses on active services running on hosts, including open ports, SSL certificates, HTTP headers, technologies detected, and response codes. Use DNS Search to discover infrastructure and subdomains; use Hosts Search to identify what services are actually running and potentially vulnerable.

Can I search by IP address in DNS records?

Yes! Use the value: filter to search by IP address in DNS records. For example, 'value:1.2.3.4' finds all DNS records pointing to that IP address, effectively performing a reverse DNS lookup. This reveals all domains hosted on a specific IP, useful for discovering virtual hosts, shared hosting environments, and related infrastructure. Combine with type filters: 'value:1.2.3.4 AND type:A' for only A records.

How accurate is Profundis DNS data?

Profundis aggregates DNS data from multiple public sources including passive DNS providers, Certificate Transparency logs, IANA registries, and internet archives. The data accuracy depends on the sources and their update frequency. DNS records are continuously refreshed, with Profundis ingesting 30-50 million DNS records daily. Check the timestamp on each record to see when it was last verified. For real-time DNS queries, use the dedicated DNS tools.

DNS Search

Explore domain name system records and relationships

Press Enter to search, Shift+Enter for new line

hosttypevalue

Try a sample query

See how search works

↵

0 records●0/s ingesting●0 GB

Related tools

Subdomain enumeration

Discover subdomains for a given domain

DNS History

View historical DNS records for a domain

Reverse DNS Lookup

Find domain names associated with an IP address

ASN Lookup

ASN lookup to find associated IP ranges and details for an IP