Security
Subdomain Finder
Enter a domain, then list host names already published in certificate transparency logs. Each name is resolved to a public IPv4 address and marked when that address is on Cloudflare. The scan is not stored.
Score
84%
Type
Lookup
Core features
Published names
Read host names from certificate transparency instead of guessing a word list.
Address and country
Resolve each name to a public IPv4 address and show the country of the most common address.
Cloudflare
An orange cloud means the address is in Cloudflare’s published ranges. Copy, CSV, and JSON export the table.
Specifications
| Source | Certificate transparency |
|---|---|
| Limit | 120 names per scan |
| Columns | Subdomain, IP, Cloudflare |
| Privacy | Not stored |