Network Tools
Subdomain Finder
Find known subdomains of a domain using a public host-search database.
Looks up live data What you enter is sent to our server to fetch live results from public sources. Results are cached briefly.
About this tool
Enter a domain to list subdomains that a public host-search database (the HackerTarget hostsearch API) already knows about, with the IP each one points to. The request is made from our server and cached for about half an hour. The tool does not brute-force names or scan the domain itself, so it only shows what that third-party source has collected; a new or rarely seen subdomain can be missing. Up to 300 results are shown. The free upstream service has a daily limit, so you may occasionally see a rate-limit message.
How to use it
- Enter a root domain such as example.com.
- Press Find subdomains.
- Scroll through the subdomains and their IPs.
- Only investigate domains you own or have permission to test.
Common problems
- Upstream rate limit reached
- The free data source limits requests. Wait and try again later.
- A subdomain you know exists is missing
- The source only lists what it has seen. It is not a complete scan.
- The list ends at 300
- Output is capped at 300 entries.