Passive DNS research

Follow infrastructure through time.

Browse recent hostname-to-IP relationships, observation counts, and month-level history. The first three pages are open; connect an account to continue through the aggregate dataset.

Recent observations
Latest pDNS batch
Unique domains
In recent batch
Unique IPs
In recent batch
Active researchers
On leaderboard

Recent pDNS relationships

Live

Aggregated host-to-IP evidence with month-level timing. Select any entity to investigate it.

Page 2 · 50 relationships
m.mercexchange.net208.91.197.26
Aug 20261 observations
www.jb33.online208.91.197.13
Aug 20261 observations
terapeum.com46.224.32.197
Aug 202685 observations
jb33.online208.91.197.13
Aug 20261 observations
purefredrics.com208.91.197.27
Aug 20261 observations
coolify.terapeum.com46.224.32.197
Aug 2026160 observations
sgunderwrite.com208.91.197.27
Aug 20263 observations
hopema.org208.91.197.27
Aug 20261 observations
fbal.us208.91.197.27
Aug 20261 observations
app.hopema.org208.91.197.27
Aug 20261 observations
violaceous.org208.91.197.39
Aug 20261 observations
mail.fbal.us208.91.197.27
Aug 20261 observations
m.violaceous.org208.91.197.39
Aug 20261 observations
allternahealth.com208.91.197.27
Aug 20261 observations
kopf-family.com208.91.197.27
Aug 20261 observations
forsythpartners.net208.91.197.27
Aug 20262 observations
app.kopf-family.com208.91.197.27
Aug 20261 observations
gpxproject.net208.91.197.27
Aug 20261 observations
www.nnecpa.com208.91.197.27
Aug 20261 observations
nnecpa.com208.91.197.27
Aug 20261 observations
mycomeyounity.com208.91.197.39
Aug 20261 observations
execuize.com208.91.197.27
Aug 20261 observations
demo.execuize.com208.91.197.27
Aug 20261 observations
weldwithlight.com208.91.197.27
Aug 20261 observations
rogue.anysoc.net208.91.197.27
Aug 20261 observations
Pages 1–3 are open to everyone. Connect an account to continue browsing.
Contributors get paid

Shared evidence, shared rewards

Passive DNS depends on overlapping sensor coverage. Paid evidence queries therefore fund a shared provider pool rather than a single feed publisher.

Included in premium search

Every private app search costs 1 CTIDAO. IP, hostname, and URL research includes complete pDNS evidence and pivots when available.

A transparent allocation

Each paid query allocates 70% to the provider pool, 20% to protocol reserve and 10% to burn liability.

Rewarded for useful coverage

Provider points reflect accepted observations, coverage and corroboration, then determine each monthly pool share.

Fund your next investigation

Connect a TON wallet and deposit CTIDAO into your app balance. Holdings set your Holder tier; app balance pays for private pDNS research.

150 relationships without an accountPrivate app query1 CTIDAO premium search
Coming soon

Platform deposits are temporarily unavailable. Public month-level pDNS browsing remains available.