Pricing

from $2.00 / 1,000 successful lookups

Subdomain Finder: Bulk Certificate Transparency Search

Find subdomains for a list of domains without an API key: bulk subdomain enumeration from the free public Certificate Transparency logs (certspotter), a crt.sh alternative. Every subdomain returned had a real TLS certificate issued for it, with its first-seen date. Send rows to Google Sheets.

Pricing

from $2.00 / 1,000 successful lookups

Rating

0.0

(0)

Developer

Adriana Voss

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.

HappiTap

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

SSL Certificate Transparency Scraper (crt.sh)

chrisp1211/certificate-search-scraper-max

Scrape SSL/TLS certificate transparency logs from crt.sh for any domain. Great for security audits and subdomain discovery. Returns common name, subdomains (SANs), issuer and validity. Pay per certificate; empty runs free.

Christian Pichichero

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

Subdomain Finder - Discover Subdomains via CT Logs

logiover/subdomain-finder

Discover every subdomain of any domain using Certificate Transparency logs (crt.sh). Fast bulk subdomain enumeration for security recon, attack-surface mapping, asset discovery and SEO. No API key — export to CSV or JSON.

Logiover

Subdomain Finder - Discover Every Subdomain Of A Domain

thirdwatch/subdomain-finder

Discover every subdomain for any apex domain. Merges 4 sources: certificate transparency (crt.sh), HackerTarget, RapidDNS, plus DNS bruteforcing of common names. Verifies each is live via DNS + HTTP probe.

Thirdwatch

X (Twitter) Profile Scraper: Followers, Bio & Stats

accountable_eel/x-profile-lookup

Bulk Twitter follower count checker: get follower count for a list of X handles without login, one spreadsheet row per account: display name, bio, exact follower, following and post counts, badge type. Check if an X account is suspended. Track weekly follower change. No API key, misses are free.

Adriana Voss

Telegram Channel Scraper: Subscriber Count, Bio & Stats

accountable_eel/telegram-channel-lookup

Telegram channel scraper without login or API key: look up a list of public channels by username and get subscriber count, description, verification badge and recent-post stats, read straight from Telegram's own public preview pages. Charged only for channels actually found.

Adriana Voss

Subdomain Finder: Certificate Transparency

glitchbound/subdomain-scraper

Enumerate every subdomain of a domain from public Certificate Transparency logs. No brute-force wordlist and no DNS hammering, because every TLS certificate is logged, so the hosts are already public record. Deduplicated to one row per hostname, with first seen, issuing CA and current validity.

Daniel Meshulam

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.