Discover subdomains for any domain using certificate transparency logs and DNS lookups.
Enter a domain to get started.
This tool discovers subdomains for any domain by combining two data sources: certificate transparency (CT) logs, which record every publicly-issued TLS certificate, and DNS brute-force lookups against a list of common subdomain prefixes. Together they surface subdomains you may not know exist.
Each subdomain is tagged CT, DNS, or BOTH to show where it was found.