Discover all active subdomains for any domain. Checks 140+ common prefixes with IP, HTTP status, and HTTPS detection.
| # | Subdomain | IP Address | Reverse DNS | HTTP Status | HTTPS |
|---|
Our scanner uses DNS resolution to discover active subdomains across multiple categories.
Checks 140+ common subdomain prefixes via real DNS lookups — only shows ones that actually resolve.
Tests each found subdomain for HTTP/HTTPS connectivity and returns the response status code.
Identifies whether each subdomain has a valid SSL certificate and is served over HTTPS.
Performs reverse DNS lookup on each IP to reveal the hosting provider or server hostname.
Download found subdomains as a CSV file or copy the list to clipboard for easy analysis.
Covers www, mail, api, blog, dev, staging, admin, cdn, shop, vpn, git, and 130+ more prefixes.