Advanced domain search

Navigate to Advanced Query Builder > Domain Queries > Search

Specify a domain regex

Specify an nsname name (wildcards are supported)

Specify an mxname (wildcards are supported)

Check withmetadata to include metadata in the results

Specify a date in first_seen_min to return only domains that have A records seen for the first time after the given date

Select a first_seen_min mode (Strict: Selects A records that do not have any timestamps before first_seen_min. Any: Selects A records that have at least one timestamp after first_seen_min).

Specify a date in first_seen_max to return only domains that have A records seen for the first time before the given date

Select a first_seen_max mode (Strict: Select A records that do not have any timestamps after first_seen_max. Any: Select A records that have at least one timestamp before first_seen_max)

Specify a date in last_seen_min to return domains that have A records last seen more recently than the given date.

Specify a date in last_seen_max to return domains that have A records last seen more recently than the given date

Select a last_seen_min mode (Strict: select A records that do not have any timestamps before last_seen_min. Any: select A records that have at least one timestamp after last_seen_min)

Select a last_seen_max_mode (Strict: select A records that do not have any timestamps after last_seen_max. Any: select A records that have at least one timestamp before last_seen_max)

Specify an asnum (AS numbers may be repeated multiple times for additional AS numbers. Separate values with semi-colon)

Specify an asname (Separate values with semi-colon)

Specify an AS name in asname_starts_with (Starting AS names may be repeated multiple times for additional AS names. Separate values with semi-colon)

Specify an AS name in asn_contains (AS names may be repeated multiple times for additional AS names - separate values with semi-colon)

Specify an AS name in asname_contains (AS names may be repeated multiple times for additional AS names - separate values with semi-colon)

Specify an AS number in asn_match_max

Specify an AS number in asn_match_min

Specify a network address in network (additional networks and netmasks may be repeated multiple times for additional networks. Separate values with semi-colon)

Specify a domain in first_seen_before to only return domains that have been seen using the NS server in the nsname parameter for the first time before the given date)

Specify a domain in first_seen_after to only return domains that have been seen using the NS server in the nsname parameter for the first time after the given date)

Specify a registrar

Specify the email used to register domains

Specify a date in whois_date_after to only return domains that have a created date in WHOIS after this date

Specify a nameserver in nschange_from_ns to search for domains that domains that have changed nameserver from this server - exact match, wildcards and 'self' options supported

Specify a nameserver in ns_change_to_ns to search for domains that have changed nameserver to this server - exact match, wildcards and 'self' options supported

Specify a nameserver in ns_change_after to only return domains with nameserver changes that occurred after this date

Specify a nameserver in ns_change_before to only return domains with nameserver changes that occurred before this date

Specify a date in cert_date_min to only return domains that have had SSL certificates issued on or after the given date

Specify a date in cert_date_max to only return domains that have had SSL certificates issued on or after the given date

Specify a certificate authority in cert_issuer

Specify a value in limit, to limit the number of results returned

Specify a value in skip, to skip a given number of results

Click Search

(Optional) Click Explore Table View to populate results in an Explore screen for further analysis

Specify the query parameters

Click Save Query

Give your query a Name

Specify a Description to add more context

Click Save