Subdomain Finder
Find the subdomains of any domain and see which are still live and where they point
Result
Enter a domain to list its subdomains.
No names match this filter.
About Subdomain Finder
Subdomain Finder lists the hostnames that exist under a domain, including the ones no website links to. Unlinked hosts are not hidden: staging servers, admin panels and old test machines often stay reachable long after everyone has forgotten them, and their names can be found by anyone.
For each name you get the date it first appeared, whether it still resolves today and where it points, so current and retired hosts are easy to tell apart.
Use it to audit what your own domain exposes before someone else does, find forgotten hosts that still answer, or map the public services of a domain you are researching.
Key Features
- Complete name list: every hostname found for the domain and its subdomains, with wildcard entries shown separately.
- Live status: each name is checked now and shown as live with its addresses or alias, or as no longer existing.
- First seen date: when each name first appeared, so recent additions stand out.
- Status filter: show only live names, only names that no longer exist or only names without an address, with a count on each.
- Filter and export: narrow the list as you type, then copy the names or download them as CSV or plain text.
- Alias and address: live names show their alias target or IP addresses, which tells you the hosting or service behind each one.
How to Use
- Enter a domain: type a domain such as example.com, or paste a full address; it is reduced to the domain name.
- Start the search: every name found is listed in alphabetical order.
- Read the status: live names show where they point, and names that no longer exist are marked.
- Filter the list: type part of a name, such as api or staging, to narrow the results.
- Export: copy all names or download the list for your audit or report.
Common Use Cases
- Security review: find admin panels, staging hosts and test servers whose names are publicly known.
- Forgotten infrastructure: spot old hosts that still resolve and may run software nobody updates any more.
- Vendor mapping: see which hosts are aliases of third-party services, such as a help desk, a storefront or a mail provider.
- Migration planning: list every hostname before moving DNS or hosting so that none is left behind.
- Research: map the public services of a domain for a vendor review or a bug bounty scope you are authorized to test.
Frequently Asked Questions
Which subdomains does it find?
Names that are on public record for the domain. A name can be listed even when no page links to it, which is why staging and internal hosts often show up.
Can I remove a subdomain from these results?
No. A name on public record stays there. If the host is no longer needed, remove it: its status then shows as no longer existing.
Why is a subdomain I use missing?
Hosts that were never on public record are not listed, and hosts grouped under a wildcard appear as the wildcard entry instead of by name.
What does "No longer exists" mean?
The name does not resolve in DNS today. It was in use at some point, but the host was removed or renamed.
How current are the results?
Results for a domain are refreshed at least every 12 hours, so a host added in the last few hours may not be listed yet.
Is looking up another domain allowed?
A lookup sends nothing to the domain's own servers. Probing or testing the hosts you find is a different matter and needs the owner's permission.
Pro Tips
- Search the main domain: enter example.com rather than www.example.com to include every name under it.
- Read wildcards carefully: a *.example.com entry means several hosts are grouped together and are not listed by name.
- Check aliases: a live name that is an alias of a service you no longer use can be claimed by someone else, so delete the record.
- Retire old names: if a forgotten host still resolves, remove its DNS record or shut it down.
- Search after every launch: look up your domain after adding a host to see what anyone else can see.