Domain Discovery & Analysis Tool

Discover all domains registered by an organization and analyze their subdomains with comprehensive domain intelligence. This powerful tool helps you map out an organization's complete digital footprint by finding related domains, subdomains, and expiration dates.

🚀 What This Tool Does

Enter any domain name, and this tool will:

• Find Related Domains: Automatically discover all domains registered by the same organization
• Discover Subdomains: Enumerate all subdomains for the target domain
• Track Expiration Dates: Get expiration and creation dates for all discovered domains
• Export Structured Data: Receive clean, structured JSON data ready for analysis

Perfect for:

• Security Research: Map out an organization's complete domain portfolio
• Brand Protection: Identify potential trademark infringements or cybersquatting
• Competitive Intelligence: Discover competitor domains and digital assets
• IT Asset Management: Maintain a complete inventory of organizational domains
• Due Diligence: Comprehensive domain analysis for mergers and acquisitions

✨ Key Features

• Comprehensive Discovery: Finds domains across multiple sources for maximum coverage
• Subdomain Enumeration: Discovers subdomains from certificate transparency logs and threat intelligence feeds
• Fast & Lightweight: Pure HTTP requests (no headless browser), so runs boot quickly and use little memory
• Concurrent WHOIS: Expiration dates are looked up in parallel for fast processing of large portfolios
• Structured Output: Clean JSON data with domain type, expiration dates, and registrar information
• Scalable: Process unlimited domains with configurable limits

📊 Output Data

Each domain record includes:

• Domain Name: The discovered domain
• Record Type: Classification (input domain, organization domain, or subdomain)
• Organization: The registrant organization name
• Expiration Date: When the domain expires
• Creation Date: When the domain was registered
• Registrar: The domain registrar
• Parent Domain: For subdomains, the parent domain

🎯 Use Cases

Security Teams

• Complete domain portfolio mapping for security assessments
• Identify potential phishing domains or brand impersonation
• Track domain expiration to prevent hijacking

Brand Managers

• Monitor brand-related domain registrations
• Detect unauthorized use of brand names
• Maintain domain portfolio inventory

Researchers & Analysts

• Competitive intelligence gathering
• Digital asset discovery
• Domain correlation analysis

IT Administrators

• Domain inventory management
• Expiration tracking and renewal planning
• Subdomain discovery for security audits

📖 How to Use

Basic Usage

1. Enter Domain: Provide the domain you want to analyze (e.g., example.com)
2. Configure Options:
   • Include subdomains (default: enabled)
   • Include expiration dates (default: enabled)
   • Maximum domains to process (default: unlimited)
3. Run: The tool automatically discovers and analyzes all related domains
4. Export: Download results as JSON or access via API

Input Parameters

• Domain (required): The domain to analyze
• Include Subdomains: Whether to enumerate subdomains (default: true)
• Include Expiration Dates: Whether to fetch expiration dates (default: true)
• Max Domains: Limit the number of domains processed (0 = unlimited)

Output Format

Results are saved to a dataset with the following structure:

{
  "domain": "example.com",
  "recordType": "organization_domain",
  "organization": "Example Corp",
  "expireDate": "2025-12-31",
  "createdDate": "2020-01-15",
  "registrar": "Registrar Name",
  "parentDomain": null
}

🔧 Technical Details

• Language: Python 3.13
• Framework: Apify SDK
• HTTP Client: httpx (async) — no headless browser required
• Data Sources: viewdns.info (reverse WHOIS), crt.sh, HackerTarget, AlienVault OTX, and WHOIS
• Proxy: Optional, used only as a fallback if the reverse-WHOIS request is blocked (a datacenter proxy is sufficient)

📈 Performance

• Speed: Reverse WHOIS in ~1–2s; expiration dates fetched concurrently (8 in parallel)
• Reliability: Direct request first with proxy fallback; subdomain sources queried in parallel and best-effort
• Scalability: Handles large domain portfolios without issues
• Accuracy: Cross-referenced data from multiple sources