Free Subdomain Finder

Discover subdomains using DNS brute-force, certificate transparency logs (crt.sh), and HTTP probing.

Enumerating subdomains for ...

Daily scan limit reached

Sign up free to get 10 scans/day — or upgrade for unlimited access.

Subdomains Found

Showing first 20 — sign up for full list
Subdomain IP
No subdomains found.

Frequently Asked Questions

What is subdomain enumeration? +
Subdomain enumeration is the process of discovering all subdomains belonging to a domain. It reveals the full attack surface by finding forgotten servers, staging environments, and internal tools.
What methods does this tool use? +
We combine DNS brute-force using a curated wordlist with certificate transparency log searches via crt.sh. Wildcard DNS is detected and filtered automatically.
Why are results limited to 20? +
Anonymous scans show the first 20 subdomains. Sign up free to see the full list, or upgrade to Pro for unlimited enumeration, export, and monitoring.