Subdomain Finder
Discover all active subdomains for any domain. Checks 140+ common prefixes with IP, HTTP status, and HTTPS detection.
| # | Subdomain | IP Address | Reverse DNS | HTTP Status | HTTPS |
|---|
How Subdomain Finder Works
Our scanner uses DNS resolution to discover active subdomains across multiple categories.
DNS Resolution
Checks 140+ common subdomain prefixes via real DNS lookups — only shows ones that actually resolve.
HTTP Status Check
Tests each found subdomain for HTTP/HTTPS connectivity and returns the response status code.
HTTPS Detection
Identifies whether each subdomain has a valid SSL certificate and is served over HTTPS.
Reverse DNS
Performs reverse DNS lookup on each IP to reveal the hosting provider or server hostname.
Export Results
Download found subdomains as a CSV file or copy the list to clipboard for easy analysis.
Common Prefixes
Covers www, mail, api, blog, dev, staging, admin, cdn, shop, vpn, git, and 130+ more prefixes.