Tools / Domain Intelligence
Subdomain Finder
Passive subdomain discovery from Certificate Transparency logs
The lookup is made by our server against public DNS; only the domain/IP you enter is used.
About this tool
Discover subdomains passively from Certificate Transparency logs, the public record of issued TLS certificates. Nothing is scanned on the target, but hosts that never received a publicly logged certificate will not appear.