Back to all tools

Subdomain Finder

Analysis

Discover subdomains of any domain using Subfinder, CT logs, and DNS enumeration.

Unlock Full Power with Krawly Pro

Get access to all 150+ tools with higher limits. Start with 100 free credits — no credit card required.

Use via API
Subdomain Finder — cURL
curl -X POST "https://krawly.io/api/v1/tools/subdomain-finder/" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{"url": "https://example.com"}'
150+ Tools Full API Access Bulk Processing Priority Support

What is Subdomain Finder?

The Subdomain Finder discovers all subdomains associated with a domain using Certificate Transparency (CT) logs, DNS enumeration, and web scraping. An essential tool for penetration testers, security researchers, and system administrators.

Use Cases

  • Security assessments — map the attack surface of a domain
  • Bug bounty hunting — discover hidden subdomains to test
  • IT asset inventory — catalog all subdomains in your organization
  • Competitive intelligence — discover competitor infrastructure
  • DNS migration — ensure all subdomains are accounted for

Key Features

Multiple discovery methods (CT logs, DNS, web scraping)
Discovers active and historical subdomains
Shows IP addresses and status for each subdomain
Exports results as structured JSON
No external API key required

Frequently Asked Questions