01 · Product name
DNSDumpster
Passive DNS research for hosts related to a domain.
Published by DNSDumpster.
In short
DNSDumpster is a domain research site that maps hosts related to a domain from passive DNS. A basic account is free. The membership page lists 50 requests a day on that tier, and paid Plus and Max plans with higher caps and published prices. A hostname is a lead from DNS. It does not mean the host is vulnerable, and it does not authorize you to scan it.
Product pricing strategy
02
Free and paid
DNSDumpster is free to start and paid when you need more volume. The membership page lists Basic at 50 requests a day and 50 subdomains per request. Plus is listed at $49 a year, and the same page shows $79 a year beside an end-of-year sale, with a cap of 200 requests a day. Max is listed at $499 a year and 2,500 requests a day. Those figures are what the page showed on review. Confirm the card before you pay.
Utility and features
03
DNSDumpster’s homepage calls it a free domain research tool that discovers hosts related to a domain. You enter a domain. It returns the records it has, from the perspective of what is visible without touching the hosts yourself. The site also sells membership for higher limits, and it points advanced work at HackerTarget.com rather than pretending one form does every reconnaissance job.
- Passive host map. Enter a domain. The site returns related hosts from DNS research, which is the homepage’s description of the product.
- Free and paid caps. Basic, Plus, and Max differ by requests per day and how many results you get. The membership page is the table.
- API on the paid tiers. The membership cards include API access to records. Basic lists it too, with the lower caps.
Read the membership page before you quote a number. When this listing was reviewed it showed Basic at 50 requests a day and 50 subdomains per request, Plus at $49 a year during a sale that also printed $79 a year, and Max at $499 a year with 2,500 requests a day. Those are the figures on that page, not a guess. Amass and Subfinder are what you run yourself when you want a different kind of enumeration. DNSDumpster is the website you open for a fast passive map.
- 1
Open DNSDumpster and enter a domain you are allowed to research.
- 2
Read the host list as DNS, not as a vulnerability report.
- 3
If you need more than the free cap, compare the membership cards rather than guessing a price.
- 4
Move to Amass or Subfinder when you want to run enumeration yourself.
Caveats
04
A name in the output is a DNS observation. It is not an invitation to probe the host, and it is not proof the service is exposed in the way a banner scan would show.
The sale price and the comparison price were both on the membership page. Quote the page you load, not this paragraph, if they have moved.
Screenshots
05
Potential use cases
06
- Before a meeting about a domain you administer or are authorized to review, search it on DNSDumpster. The output is the host map from their DNS research: names, and the mail and remote-access-looking names the map happens to show. A name is a DNS observation. It is not a banner and not permission to probe. Pivot a name you do not recognize to a passive Amass or Subfinder list, and to Shodan only for the stored banner.
- You want to know whether the public DNS for a brand shows mail and remote-access names. Read those labels on the map, then confirm the records in DNS you are allowed to query. The map can be incomplete or stale. The membership page has carried a price. Quote the page you load if you cite a number. This listing does not freeze it.
- Pull a dated copy of the map for a domain you administer and file it with the date. The output is that snapshot. Re-run later and diff the names. A new remote-access name is a lead for the owner, not a login to attempt.
Hard cases
The case where the first result is easy to over-read.
The map shows a name that looks like a VPN
Write the name down and give it to the team that owns the domain. Do not try default credentials and do not port-scan it because the label was suggestive. DNSDumpster did not test the service. If you need a service banner, search Shodan or Censys for what those indexes already stored, and stay inside the scope. The price on the membership page is whatever it says today.
Questions
Is DNSDumpster free?
There is a free Basic tier. Plus and Max are paid. The membership page lists the caps and the prices.
Does a DNSDumpster result mean a host is vulnerable?
No. It means the name showed up in the passive research the site describes. Testing the host is a separate decision.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
DNSDumpster
https://dnsdumpster.com/Pricing
DNSDumpster membership
https://dnsdumpster.com/membership/