Subdomain Lookup
Enumerate all subdomains for any domain using public Certificate Transparency (CT) logs. Fast, comprehensive discovery through public records without active scanning.
Discovering a subdomain is usually the first step, not the last. Once a scan turns up hosts you had forgotten — old staging or mail names are common — it is worth checking each one for delegation, glue and MX record problems that can quietly break resolution or email. If a name you found has recently changed hands or been repointed, you can also confirm how those records have propagated across public resolvers to be sure the update is live everywhere.
Frequently Asked Questions
Everything you need to know about subdomain discovery
Still have questions?
Contact us at a14a.org and we’ll help you out.
Explore More Tools
DNS Flattener
Resolve CNAME chains and flatten DNS records to final IPs.
DNS Validator
Check for missing glue records, lame delegation, and configuration issues.
DNS Propagation
Check DNS propagation across 40+ global resolvers in real-time.
DNSSEC Validator
Validate DNSSEC chain of trust, DS, DNSKEY, and RRSIG records.