Find subdomains
Search history
Saved in this browser. Select an entry to fill the search field.
No searches in this tool yet.
Available with a paid subscription or PAYG credits.
Try an example
Frequently asked questions
The default list comes from DNS observations in Profundis. Each lookup also schedules a DNS refresh. When the inventory is empty, paid or PAYG requests can receive newly discovered names immediately. Free accounts can retry after the background refresh.
Enable Only resolving · Live to keep names confirmed by DNS within the last 24 hours. Verification continues through the full inventory, with results arriving progressively. Available with a paid subscription or PAYG credits.
You see a free estimate of the number of names before you confirm. Then it costs 1 credit per 100 names for the first 300, and 1 credit per 300 after that, with a minimum of 1 credit. Free accounts without purchased credits get up to 300 names per lookup.
Yes. Create a DNS monitor with host:*.example.com to follow observations under the domain. For team setup, see domain monitoring.
Yes, through the API, with only_resolving: true for Live. API access needs a paid plan or purchased credits.