Domain reconnaissance

Subdomain Finder

Discover subdomains from certificate transparency and a common-name check, resolve DNS records, and spot exposed HTTP/HTTPS services.

Enter a registrable domain. Internationalised names are converted to punycode.

Passive discovery
Certificate transparency logs plus a small, bounded common-name check.
Live classification
DNS resolution and a light HTTP/HTTPS probe mark hosts active or inactive.
Safe by design
Private, loopback, link-local and metadata ranges are never probed.

Try: , ,