Subdomain Finder

Discover a domain's subdomains from certificate transparency logs and a sweep of common names, then resolve each to see which are live.
sync_alt

Runs in your browser and on our edge servers

DNS questions go from your browser to public resolvers; HTTP checks go through a dotbunker edge server. Nothing is stored.

Data sources

crt.sh · DNS over HTTPS · Cloudflare · Google