Subdomain Scanner
Discover all subdomains in seconds
36,315+
Records indexed
< 1s
Avg. scan time
JSON & CSV
Export formats
Recently scanned
What is subdomain scanning?
Subdomain scanning discovers all subdomains belonging to a domain name — like mail.example.com, api.example.com, or staging.example.com. These are often hidden from public view but can reveal important infrastructure details.
Why scan subdomains?
Security researchers use subdomain enumeration to map an organization's attack surface. Developers use it to audit their own infrastructure. Results include IP addresses for each subdomain found.