Shadow AI Finder by Agent Trust Cloud

Domains used by DeepSeek API

DeepSeek API is in the Model API or platform category. These 2 domains and their subdomains identify its traffic in DNS, proxy and firewall logs.

Traffic to a model API usually comes from software, a script or an agent calling the model, not from a person in a browser. The next step is finding which application makes the calls.

Domain list

DomainCovers
api.deepseek.comapi.deepseek.com and every subdomain (*.api.deepseek.com)
platform.deepseek.complatform.deepseek.com and every subdomain (*.platform.deepseek.com)
api.deepseek.com
platform.deepseek.com

Download all services (CSV)

Block or allow DeepSeek API

Ready-made entries for common systems. Blocking can break things people rely on, so decide with the teams who use it first.

Plain domain list

One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

# Block list — Plain domain list
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

api.deepseek.com
platform.deepseek.com

Wildcard list (*.domain)

Each domain plus a *.domain entry, for gateways that need explicit wildcards.

# Block list — Wildcard list (*.domain)
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Each domain plus a *.domain entry, for gateways that need explicit wildcards.

api.deepseek.com
*.api.deepseek.com
platform.deepseek.com
*.platform.deepseek.com

Hosts file

Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

# Block list — Hosts file
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

0.0.0.0 api.deepseek.com
0.0.0.0 platform.deepseek.com

dnsmasq

address=/domain/ also blocks every subdomain.

# Block list — dnsmasq
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# address=/domain/ also blocks every subdomain.

address=/api.deepseek.com/0.0.0.0
address=/platform.deepseek.com/0.0.0.0

Unbound

Add to unbound.conf under server:. always_nxdomain covers subdomains.

# Block list — Unbound
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add to unbound.conf under server:. always_nxdomain covers subdomains.

local-zone: "api.deepseek.com." always_nxdomain
local-zone: "platform.deepseek.com." always_nxdomain

BIND response policy zone (RPZ)

Records for a response-policy zone. Add your zone's SOA and NS records at the top.

; Block list — BIND response policy zone (RPZ)
; DeepSeek API (2 domains)
; Generated by Shadow AI Finder (shadowaifinder.com)
; Records for a response-policy zone. Add your zone's SOA and NS records at the top.

api.deepseek.com CNAME .
*.api.deepseek.com CNAME .
platform.deepseek.com CNAME .
*.platform.deepseek.com CNAME .

Pi-hole regex

Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

# Block list — Pi-hole regex
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

(\.|^)api\.deepseek\.com$
(\.|^)platform\.deepseek\.com$

Squid dstdomain

A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

# Block list — Squid dstdomain
# DeepSeek API (2 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

.api.deepseek.com
.platform.deepseek.com

Check a log for DeepSeek API

Paste log lines to see whether DeepSeek API shows up and how often. Nothing leaves your browser.

Scan a whole log file for all AI services

Knowing the domains is step one

A list tells you where traffic goes. Agent Trust Cloud keeps an inventory of AI agents, who owns each, and what it may do, and applies your policy before an agent acts. Discover, the monitor-only tier, is free.

Start free with Discover What shadow AI is

Other services in Model API or platform

All Model API or platform domains in one list · All 79 services