Our Mission
At xReverseLabs, our mission is to empower the global cybersecurity community by democratizing access to crucial internet telemetry data. We believe that by providing free, accessible, and high-quality data, we enable researchers, security professionals, and academic institutions to develop innovative solutions against emerging digital threats. Our platform is built on the principle of collaborative intelligence, where shared knowledge leads to a safer internet for everyone.
Our Vision
We envision a future where cybersecurity defenses are proactive, not reactive. By continuously aggregating and curating vast amounts of internet data, we aim to be the leading open source intelligence platform. Our goal is to provide the foundational data necessary for threat intelligence teams to stay ahead of malicious actors and for researchers to discover new patterns of attack before they become a global problem.
What is Project Opendata xReverseLabs?
The data provided through our Open Data Program is a powerful collection of information sourced from the most fundamental parts of the internet. We specialize in aggregating data from several key areas:
- FDNS / Reverse IP Data: We collect extensive data on Forward DNS and Reverse IP records, enabling you to map the relationships between IP addresses and domain names. This is crucial for threat hunting and infrastructure analysis.
- Raw Domain Data: We provide a continuously updated stream of raw domain data, ideal for monitoring new domain registrations and detecting trends in domain usage, including those used for phishing or malicious activities.
- Domain by Date Data: A deep archive of our daily domain findings, organized by date. This allows you to perform historical analysis and track the evolution of cyber threats over time.
- Zone Files Data: We process and curate vast amounts of Zone File data, which provides comprehensive lists of domains for a wide range of top-level domains (TLDs). This is a critical resource for brand protection and domain research.
By making this data available, we aim to support:
- Threat Intelligence: Enabling security teams to proactively identify and block malicious domains.
- Academic Research: Providing rich datasets for studies on internet security and network behavior.
- Brand Protection: Helping organizations monitor for unauthorized use of their brand in newly registered domains.
- Vulnerability Discovery: Assisting in the identification of misconfigurations or vulnerabilities exposed through domain and IP data.
Sample Data
Below is an example of the kind of raw data we provide. Our datasets are delivered in an easy-to-parse text format, ready for your analysis tools and custom scripts.
(This image shows a sample of FDNS/Reverse IP domain data in a json file format. )
(This image shows a sample of Raw domain data in a text file format. )
How to Access Our Data
While our data program is committed to openness, we require users to sign in to ensure responsible use and track the impact of our data on the cybersecurity community. Once logged in, you will gain full access to download our datasets.
For any inquiries or partnership opportunities, please don't hesitate to contact us at l1nux3r69[at]gmail.com or on Telegram at @xxyz4.
Dataset Overview
The xReverseLabs Domain Dataset is an open cybersecurity-focused dataset that aggregates domains and DNS data at internet scale. The data is continuously updated and designed to support threat intelligence, academic research, and large-scale internet measurements.
Dataset Collections
1. Daily Domain Dump Dataset
A daily list of observed domains collected from multiple sources.
Format: Plain text file, one domain per line.
File naming: YYYY-MM-DD_domains.txt
linux.com site.com blog.com
2. Domain By Date Full Data
Historical dataset of new/unique domains by date. Useful for trend analysis and monitoring emerging threats.
Format: Plain text file.
File naming: all_new_domains_YYYY-MM-DD.txt
all_new_domains_2025-08-22.txt all_new_domains_2025-08-21.txt
3. Domain By Extension Dataset
Domains grouped by TLD/extension. Useful for focused research (e.g., only .com or .org domains).
Format: Plain text, usually compressed (.txt.gz).
Examples:
com.txt.gz org.txt.gz net.txt.gz
4. Forward DNS (FDNS) Dataset
JSON records of Forward DNS queries with resolution status, timestamp, and resolved IPs.
Format: JSON lines.
Fields: name, status, timestamp, ip_addresses.
{
"name": "example.com",
"status": "NOERROR",
"timestamp": "2025-08-01T09:44:25.518991600Z",
"ip_addresses": ["93.184.216.34"]
}
Access Instructions
All datasets are hosted on a public Amazon S3 bucket:
s3://xreverselabs-domain-dataset/daily/ s3://xreverselabs-domain-dataset/by-date/ s3://xreverselabs-domain-dataset/by-extension/ s3://xreverselabs-domain-dataset/fdns/
Example commands with the AWS CLI:
# List daily domain dump files aws s3 ls s3://xreverselabs-domain-dataset/daily/2025/08/ # Download a specific file aws s3 cp s3://xreverselabs-domain-dataset/daily/2025/08/2025-08-22_domains.txt .
Use Cases
- Threat Intelligence: Identify and track malicious or suspicious domains.
- Academic Research: Study DNS patterns, domain lifecycles, and internet infrastructure.
- Brand Protection: Detect unauthorized use of trademarks in new domain registrations.
- Network Measurement: Analyze domain distribution by TLD and IP mapping.
License & Citation
The dataset is licensed under Creative Commons Attribution 4.0 (CC-BY-4.0).
Citation:
xReverseLabs Domain Dataset (2025). Available at: https://registry.opendata.aws/xreverselabs-domain-dataset