Download

Drill through any domain.

Strata reads one domain through six layers of public record, then counts what else stands on the same infrastructure.

Sample run: drilling johndoe.example

johndoe.example sample Bedrock reached Reached

Registrationsample

Registrar
Example Registrar, Inc.
Created
2014-03-09
Expires
2027-03-09
Registrant
redacted for privacy

DNSsample

A
203.0.113.24
MX
10 mail.johndoe.example
NS
ns1.example.net · ns2.example.net
TXT
v=spf1 include:_spf.example.net ~all

Certificatessample

Subject
johndoe.example
Names
www · shop · pay · +9 more
Issuer
Example Trust CA 2
Valid
2026-09-14 to 2026-12-13

Hostingsample

Address
203.0.113.24
Network
203.0.113.0/24
ASN
AS64500 · EXAMPLE-HOSTING
Reverse
web-24.example.net

Mailsample

MX
mail.johndoe.example
Mail host
mx.example.org
Address
198.51.100.7
Policy
SPF ~all · DMARC p=none

Historysample

2014-03
registered, Example Registrar
2019-06
nameservers moved to example.net
2023-11
192.0.2.80 → 203.0.113.24

47other domains stand on
the same bedrock
samplenot reached yet

  • 31same server203.0.113.24
  • 9same certificate1 certificate
  • 7same mail hostmx.example.org

The 47 names are in the app.

Download for Windows

Six layers. Six answers.

Each layer is one kind of public record. Strata reads them top to bottom and keeps the source and the date next to every row.

  1. 01Registration

    Who registered it, and when?

    Registrar, creation and expiry dates, status codes, and the registrant where the registry publishes one.

    RDAPWHOIS

  2. 02DNS

    Where does the name point?

    Addresses, mail exchangers, nameservers and text records, read from public resolvers.

    AAAAAMXNSTXTCNAME

  3. 03Certificates

    Which names share its certificates?

    Every certificate issued for the domain in public transparency logs: names, issuer, validity dates.

    CT logsSANissuer

  4. 04Hosting

    Whose network is it on?

    The address, its network block, the autonomous system that announces it, and reverse DNS.

    IPCIDRASNPTR

  5. 05Mail

    Who carries its mail?

    Mail hosts and where they resolve, plus the SPF and DMARC policy the domain publishes.

    MXSPFDMARC

  6. 06History

    What changed, and when?

    Earlier registrars, nameservers, addresses and certificates, in date order.

    first seenlast changed

Different names. One bedrock.

Two sites can share nothing on the surface and still stand on one server, one certificate or one mail host. Strata counts every domain that does, and groups them by what they share.

  • Same serverDomains that answer from the same IP address.
  • Same certificateNames that appear together on one certificate.
  • Same mail hostDomains that hand their mail to the same host.
johndoe.example one server · 203.0.113.24
Sample. Different names on the surface, one server underneath. The other names are in the app.

What Strata never does.

Public data only. These are promises about the product, not switches in a settings page.

Before you drill

01What does Strata read?

Public records about a domain: registration data, DNS, certificate transparency logs, network and routing registries, and published mail policy. They are the same sources anyone can query by hand, one at a time.

02Can it see private things?

No. It has no way into accounts, internal networks, private panels or redacted registrant details. When a registry hides a name, Strata shows it as hidden.

03Where do the results go?

They stay on your PC. There is no account and no cloud copy. Export a core as a file when you need to hand it to someone.

04Is this allowed?

Reading public records is something anyone can do by hand, and it is routine work for security teams, journalists and due-diligence checks. Follow each source’s terms of use and your local law. Do not use Strata to harass anyone.

Pull your first core.

Windows 10 and 11 · Public records only · No account

Download for Windows