What this tool can and cannot do
Finding every website hosted on a shared IP requires a large commercial database built by crawling the web. That feature is only active when a HackerTarget API key is configured; otherwise this tool shows the reverse-DNS hostname only and says so clearly.
Data sources: Public DNS-over-HTTPS resolvers · HackerTarget API (optional, key required)
Understanding the results
Forward-confirmed means the hostname resolves back to the same IP, which is a sign the reverse DNS was set up deliberately by the network operator. Mail servers often require this.
Troubleshooting
- No hostname: many addresses, especially home and cloud IPs, have no reverse-DNS record. That is normal.
Frequently asked questions
Why don't I see all websites on the IP?
There is no DNS query that lists domains by IP. Services that offer this build their own databases by scanning the internet, which is a paid data product.