Hosted Domains Lookup

Find domains associated with an IP via its reverse-DNS hostname and certificate-transparency logs — not a general reverse-IP lookup, and the response says exactly why.

Enter an IP address above and press Look up.

This starts from the IP's own PTR (reverse-DNS) record to find its registrable domain, then searches certificate-transparency logs (crt.sh) for other subdomains that have had a publicly-logged certificate under that same domain.

What this can and can't find

No PTR record
Nothing is returned — there's no domain to search from.
Shared hosting
Unrelated domains on the same IP with their own certificates and no PTR relationship to this hostname will not appear.
Uncertified domains
Only domains that have obtained a publicly CT-logged certificate at some point are surfaced.

FAQ

No — a true reverse-IP product would list every domain hosted on an address regardless of DNS/certificate history, which needs a much larger crawled dataset than a live PTR + crt.sh search.
null means the certificate-transparency search itself couldn't be completed (crt.sh unreachable); an empty list would mean it ran and found nothing — the two are kept distinct rather than conflated.

About this tool

The hosted domains lookup lists domains that are associated with an IP address. It uses reverse DNS and certificate-transparency logs, where certificates issued for a domain record the names that were covered.

How it works

Both sources are public and are queried when you search. Combining them surfaces hostnames that a single PTR record would never show, such as the sites a shared server presents certificates for.

What to keep in mind

This is not a general reverse-IP database. Domains that use no public certificate, sit behind a CDN or share an address with thousands of others may be missing or show a provider's name instead of the real site.

Common uses

It helps when investigating what runs on a suspicious server, mapping the footprint of a hosting provider, and confirming that a certificate you were shown really belongs to the address serving it.

Related: Reverse DNS lookup · IP whois lookup · ASN lookup · IP lookup