Reveal the
subdomains

Find all the subdomains behind a domain using passive recon across public certificate transparency logs and DNS sources. No scanning, no noise.

5 of 5 free lookups left today

Subdomains are discovered passively from publicly available sources such as certificate transparency logs and DNS records. We never actively scan or probe the target.