Subdomain finder: every subdomain of a domain, checked in DNS

Created by

Anshuman Atrey

Actor

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

Find the subdomains of any domain from public sources (crt.sh, HackerTarget, RapidDNS and CertSpotter) with no API key, each one checked live in DNS, one row per subdomain. Type a domain or paste a URL; full URLs are cleaned. Add your own API keys to search the other 50 sources too.

Try for free

Email & Subdomain Finder - theHarvester OSINT | 54 Sourcesanshumanatrey/theharvester-osint

Subdomain (host)

Live now? (resolves)

IP address (ip)

Website researched (domain)

+1 field

Input

Website to research (domain)(required):apify.com

Where to search (sources):crtsh+3

Results per source (limit):500

Output fields

Subdomain (host)

Live now? (resolves)

IP address (ip)

Website researched (domain)

Found at (timestamp)

How it works

Sign up on Apify or log in

The Email & Subdomain Finder - theHarvester OSINT | 54 Sources Actor is ready to run with the inputs already set for "Subdomain finder: every subdomain of a domain, checked in DNS". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Subdomain finder: every subdomain of a domain, checked in DNS" task

The Email & Subdomain Finder - theHarvester OSINT | 54 Sources Actor will start running based on the input automatically. You can also change all the input fields, like website to research (domain), where to search (sources), and more, to match your specific use case.

Receive the "Subdomain finder: every subdomain of a domain, checked in DNS" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as subdomain (host), live now? (resolves), IP address (ip), and more.