Features

One Time Full Database

Get the one time full database of subdomains - first step towards implementing a robust attack surface tool. Great choice for Security Analysts, Threat Hunters, SOC Teams & Incident Responders.

Daily Updates

Daily Subdomains Database is valuable for any use case that relies on fresh, time-sensitive, or continuously changing data like fraud preventiona and threat detection.

Weekly Updates

Weekly updates are ideal for use cases that don’t require real-time changes like Security Audits, Compliance Checks, Research & Trend Analysis.

Monthly Updates

Monthly updates are best suited for use cases where real-time data is not critical, but periodic refreshes are required like Long-Term Trend Analysis, Data Warehousing & Enrichment.

Monthly Snapshots

Monthly Snapshots will be part of every Update plan this will make sure that our clients Databases are up-to-date and in Sync with us.

Up-to-date Data

Our crawlers are working 24/7 to make sure that our users get the most accurate and up-to-date data.

Downloadable CSV File

Download daily, weekly, and monthly CSV updates from the past three months on our database updates page. A sample zipped CSV is also available for quick access.

Uncover Hidden Subdomains.
Eliminate Blind Spots.

Common Use Cases

Attack Surface Management Identify all exposed subdomains linked to your domain or organization to reduce blind spots and potential entry points for attackers.
Threat Detection & Prevention Detect rogue or misconfigured subdomains that could be used in phishing, malware hosting, or subdomain takeover attempts.
Brand Protection Monitor for impersonation or typo-squatted subdomains that misuse your brand name to deceive users or harm reputation.
Bug Bounty & Security Research Used by ethical hackers and researchers to discover forgotten, deprecated, or vulnerable subdomains during recon and testing.
Red Teaming & Penetration Testing Essential for mapping out the full scope of an organization’s internet-facing assets during simulated attacks.
DNS & Infrastructure Auditing Audit subdomain configurations across internal and external systems to ensure secure DNS records and no untracked assets.
Competitive Intelligence Track changes in subdomain structures of competitors to infer technology stacks, product launches, and platform expansions.
Digital Footprint Monitoring Continuously monitor your organization’s online presence - including third-party services and dev/test environments - to ensure visibility and control.
Response
Subdomains Database Documentation

Calling API

For getting the API key, you need to get started with our developer account. When you sign up, then you can copy the API key from our billing dashboard.

Sample File:

  • Download sample of subdomains database updates files from here.
API GET
https://files.whoisfreaks.com/v3.2/download/dbupdate/daily/whois?apiKey=API_KEY&date=
API GET
https://files.whoisfreaks.com/v3.2/download/dbupdate/weekly/whois?apiKey=API_KEY&date=
API GET
https://files.whoisfreaks.com/v3.2/download/dbupdate/monthly/whois?apiKey=API_KEY&date=

Query Parameters

  • Required
    apiKeyGet your API key from our billing dashboard.
  • Optional
    dateDate parameter is optional. The most recent data will be fetched if the link doesn't have a date specified. If you choose to provide a date, use the format (yyyy-MM-dd).
Responses

200 OK
400 Please pass apiKey param value
400 fileType is not found.
401 Api record not found.
401 Provided API key is inactive.
401 Please buy database subscription.
401 Your database subscription plan is inactive.
401 You cannot download file.
401 You have exceeded the download limit of 20000.
401 Suspicious Activity.
404 File is not available of this date.
413 Please upgrade your plans.

Request
Shell Node.js Java Python PHP Ruby JS C# Go C Swift
GET
Copy
Response
200 400 401 404 413
CSV Format
Copy
OK

Files Status API

The Whois Files Status API provides comprehensive details about the availability and update status of various Whois datasets. It includes several key datasets, such as:

  • Newly registered domains: Includes cleaned gTLDs, cleaned ccTLDs, gTLDs, DNS records, and ccTLDs.
  • Expired domains: Covers both cleaned and regular expired domains.
  • Dropped domains: Details on domains that have been removed or dropped.

In addition to these datasets, the API offers information on the update frequency of Whois, DNS and Subdomains data. Updates are available in three time intervals:

  • Daily: Regularly updated Whois and DNS data.
  • Weekly: Whois and DNS data refreshed on a weekly basis.
  • Monthly: Monthly updates are provided for Whois data, though DNS updates may not always be available.

This structure enables users to track the currency and availability of various domain datasets, ensuring access to the latest WHOIS and DNS information.

Request
GET
JSON Format
Copy
Response
Copy



FAQs

What is subdomains Database?

A Subdomains Database contains all domains and along with their subdomains. This full Subdomains Database is very helpfull in attack surface mapping and threat hunting.

How frequent are the subdomains added?

Subdomains are added on daily basis.

How Subdomains helps in Attack Surface Mapping?

Subdomains play a crucial role in attack surface mapping by expanding the potential entry points for attackers.

How to find subdomains of a domain?

You can use our live tool for subdomains enumeration [add tools link] and if you want a more robust solution then you can use our subdomains database.

How many subdomains can you have?

We have Billions of subdomains, however these counts changes on daily basis. You can get an accurate number from our homepage.

How do subdomains affect SEO?

Subdomains can impact SEO both positively and negatively, depending on how they are used. While search engines treat subdomains as separate entities, they can be beneficial for organizing content, targeting specific audiences, or hosting different types of content. However, they can also dilute the authority of your main domain if not managed properly.