Pricing

$30.00 / 1,000 domain checkeds

Subdomain Finder — CT Log Enumeration + Live DNS Check

Input: a domain. Output: JSON records of subdomains found in public Certificate Transparency logs (crt.sh), each with a live DNS resolution check. Passive recon — no active scanning of the target. Cheap pay-per-result pricing: $0.03 per domain checked.

Pricing

$30.00 / 1,000 domain checkeds

Rating

0.0

(0)

Developer

Anthony Snider

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

Developer tools

Automation

You can access the Subdomain Finder — CT Log Enumeration + Live DNS Check programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {
9    "domain": "github.com",
10    "domains": ["apify.com"],
11}
12
13# Run the Actor and wait for it to finish
14run = client.actor("eliai/subdomain-finder").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
18for item in client.dataset(run["defaultDatasetId"]).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Subdomain Finder API — CT Logs + DNS Check API in Python

The Apify API client for Python is the official library that allows you to use Subdomain Finder — CT Log Enumeration + Live DNS Check API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Subdomain Finder — CT Log Enumeration + Live DNS Check API in JavaScript

Subdomain Finder — CT Log Enumeration + Live DNS Check API through CLI

Subdomain Finder — CT Log Enumeration + Live DNS Check OpenAPI definition

Subdomain Finder — CT Log Enumeration + Live DNS Check API

Subdomain Finder - Discover Subdomains via CT Logs

logiover/subdomain-finder

Discover every subdomain of any domain using Certificate Transparency logs (crt.sh). Fast bulk subdomain enumeration for security recon, attack-surface mapping, asset discovery and SEO. No API key — export to CSV or JSON.

Logiover

Subdomain Finder - Discover Every Subdomain Of A Domain

thirdwatch/subdomain-finder

Discover every subdomain for any apex domain. Merges 4 sources: certificate transparency (crt.sh), HackerTarget, RapidDNS, plus DNS bruteforcing of common names. Verifies each is live via DNS + HTTP probe.

Thirdwatch

Subdomain Finder — Passive Subdomain Enumeration (Subfinder)

ntriqpro/subfinder-osint

Discover subdomains of any domain fast using the open-source Subfinder engine — passive enumeration from dozens of public sources (certificate transparency, DNS datasets, search engines). For attack-surface mapping and authorized security research.

daehwan kim

Domain OSINT Recon

prooflio/domain-osint-recon

Aggregates WHOIS, DNS records, certificate-transparency subdomains and PTR records for a domain into one structured report.

Prooflio AI

5.0

Domain Intelligence Scanner: WHOIS, DNS, SSL & Subdomains

ntriqpro/domain-intelligence-scanner

Run a full due-diligence scan on any domain in one call: WHOIS registration, DNS records, SSL certificate, subdomain discovery (crt.sh), and technology fingerprint. Built for OSINT, security recon, M&A due diligence, and lead research.

daehwan kim

Certificate Transparency Monitor — AI Agent Recon API

logiover/certificate-transparency-monitor

Keyless certificate transparency intelligence for AI agents: crt.sh CT logs. Track new TLS certs for any domain, discover subdomains via wildcard, batch domains. Issuer, validity, SAN domains and serial per row. No API key, no browser.

Logiover

MX Record Checker - Verify a Domain Can Receive Email

eliai/mx-record-checker

Check a domain's mail servers via DNS. Input: domains (list). Output: JSON per domain with MX records and priorities, canReceiveEmail flag, and resolved A records for each mail host. Cheap pay-per-result: $0.01 per domain checked.

Anthony Snider

DNS Records Lookup - All Record Types for Any Domain

eliai/dns-records-lookup

Look up every DNS record type for a domain in one call. Input: domains (list). Output: JSON per domain with A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, SRV, PTR records and values. Cheap pay-per-result: $0.02 per domain checked.

Anthony Snider

🔍 Subdomain Finder & CT Log Scraper

taroyamada/subdomain-finder

Map website architectures by extracting subdomains from public Certificate Transparency logs to find unlinked staging sites.

naoki anzai

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.