Find every subdomain of a domain
Every certificate a public CA issues is published to Certificate Transparency logs. This site reads all of them and keeps one fact: which hostnames have appeared under which registrable domain.
6,092,767,117
Subdomains
658,654,472
Apex domains
72,445,516,384
Log entries read
126
CT logs followed
How to use it
Search returns hostnames, not certificates. A name appears once however many certificates carried it.
For scripting, every result is available as newline-delimited text:
curl https://crt.live/txt/example.comThat endpoint streams, so it works just as well for a domain with a hundred thousand subdomains as for one with three. See the API.
Just seen connecting
- skinanimation.xyz
- www.similaritybox.xyz
- *.littlehaltradio.com
- firstsalary.money
- *.firstsalary.money
- events.gas-tarife.info
- build.websiteuptime.uk
- relief.zahnfamily.net
Names as they are pulled out of the logs, about one a second. Domains with more than 500 subdomains are left out, or they would be all there was.