Pricing

from $0.70 / 1,000 results

Subdomain Finder - Discover Every Subdomain Of A Domain

Discover every subdomain for any apex domain. Merges 4 sources: certificate transparency (crt.sh), HackerTarget, RapidDNS, plus DNS bruteforcing of common names. Verifies each is live via DNS + HTTP probe.

Pricing

from $0.70 / 1,000 results

Rating

0.0

(0)

Developer

Thirdwatch

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

Categories

Developer tools

SEO tools

You can access the Subdomain Finder - Discover Every Subdomain Of A Domain programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {
9    "domains": ["onescales.com"],
10    "sources": [
11        "crtsh",
12        "hackertarget",
13        "rapiddns",
14        "dnsbruteforce",
15    ],
16}
17
18# Run the Actor and wait for it to finish
19run = client.actor("thirdwatch/subdomain-finder").call(run_input=run_input)
20
21# Fetch and print Actor results from the run's dataset (if there are any)
22print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
23for item in client.dataset(run["defaultDatasetId"]).iterate_items():
24    print(item)
25
26# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Subdomain Finder - Discover Every Subdomain Of A Domain API in Python

The Apify API client for Python is the official library that allows you to use Subdomain Finder - Discover Every Subdomain Of A Domain API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Subdomain Finder - Discover Every Subdomain Of A Domain API in JavaScript

Subdomain Finder - Discover Every Subdomain Of A Domain API through CLI

Subdomain Finder - Discover Every Subdomain Of A Domain OpenAPI definition

Subdomain Finder - Discover Every Subdomain Of A Domain API

Real Subdomain Finder

onescales/real-subdomain-finder

Discover every subdomain for any domain. Queries 40+ OSINT sources including cert transparency, DNS archives & web scanners. Results enriched with DNS validation, HTTP probing, and subdomain takeover detection. No API keys required.

One Scales

5.0

Subdomain Finder

automation-lab/subdomain-finder

This actor discovers subdomains by querying certificate transparency logs via crt.sh. It finds all SSL/TLS certificates ever issued for a domain, extracting unique subdomain names. This passive reconnaissance technique requires no direct scanning.

Stas Persiianenko

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.

HappiTap

Subdomain Finder & Reverse IP

canadesk/subdomain-finder-reverse-ip

Enumerate Subdomains and Reverse IPs with RapidDNS, Anubis, AlienVault and crt.sh! It's fast and costs little.

Canadesk Support

214

SSL Certificate Transparency Search

ryanclinton/crt-sh-search

Search Certificate Transparency (CT) logs via crt.sh to discover every SSL/TLS certificate ever issued for any domain. Enumerate subdomains, audit certificate histories, and monitor for unauthorized certificate issuance -- all through a clean JSON API on Apify with no infrastructure to manage.

Ryan Clinton

Domain WHOIS & DNS Lookup â€” Registration, DNS Records & Tech

sovereigntaylor/domain-whois-scraper

Look up WHOIS data, DNS records, SSL certificates, and tech stack for any domain. Bulk domain research for lead generation, SEO audits, domain investing, and competitive intelligence. Uses RDAP, DNS-over-HTTPS, Certificate Transparency, and web WHOIS providers.