Home
Tools
Subdomain finder

Subdomain finder

Find known subdomains for any domain using public records and databases. Useful for security reviews, research, and domain inventory. Get a clean list you can act on.

Two-step verification: 1) Discovers candidate subdomains from crt.sh Certificate Transparency logs. 2) Verifies each one via real DNS lookup (Cloudflare 1.1.1.1) to filter out expired/decommissioned subdomains. Only LIVE

Want to scrape data in bulk? Try Thunderbit for free.

Chrome Store Rating
PRODUCT HUNT#1 Product of the Week
Accenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logoAccenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logoAccenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logoAccenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logoAccenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logoAccenture logoCriteo logoGrammarly logoVerisk logoklook logoPuma logoRingCentral logo
Automate Web Data Extraction FastUse Thunderbit’s Chrome extension to scrape websites and extract structured data in a couple of clicks. Pull details from subpages, PDFs, docs, and images, then export to Sheets, Airtable, or Notion.
chrome-web-store
Install fromChrome Web Store

Automate Web Data Extraction Fast

Thunderbit helps you scrape data from websites while you browse, using AI Suggest Fields to detect the right columns and extract structured information. Collect data from listings, directories, and results pages, then enrich it with subpage scraping across profiles, detail pages, PDFs, docs, and images. Clean up your output with AI-powered summarizing, categorizing, and formatting, then export to Google Sheets, Airtable, or Notion. Use pagination support and scheduled scraping to keep datasets updated with minimal manual work.

How to Find Subdomains Using Thunderbit

step_01.png
STEP 1Download and InstallDownload and install the Thunderbit Chrome Extension from the Thunderbit Chrome Extension Download Page. Once installed, log in or create a free account to get started.
step_02.png
STEP 2Open ExtensionOpen Chrome and click the Thunderbit extension icon to launch Thunderbit. In the tool list, select the "Subdomain Finder" and open the "Find subdomains" tab. In the Domain field, enter a root domain in standard format (for example, example.com) without http:// or https://. Optionally, set Search depth to shallow, standard, or deep based on how exhaustive you want the scan to be, and choose Include details to return either subdomains only or subdomains with IP address and discovery source when available.
step03.png
STEP 3Click the Find subdomains ButtonClick the "Find subdomains" button to start the scan. Thunderbit will query public records and databases and return results in a table with columns such as Subdomain, IP Address, and Discovery Source (depending on your detail setting). Review the table, then export the results to Excel, Google Sheets, Airtable, or Notion, or download as CSV or JSON from the export options.

Learn how to find subdomains for any root domain

Discover subdomains from public sources

Subdomain Finder helps you enumerate known subdomains tied to a root domain by checking public records and databases such as certificate transparency logs and passive DNS sources. Enter a domain like example.com, choose a search depth, and get a structured list of hostnames that may represent apps, portals, APIs, or staging environments. It’s built for security teams, IT admins, and researchers who need visibility beyond the main website.
Get Started Free
sub_card_1.png

Enrich results with IP and source context

When you enable details, the tool returns each discovered subdomain alongside an IP address and a discovery source label when available. This added context helps you validate findings, prioritize what to review, and understand where each record came from. If you only need a clean hostname list, you can switch to subdomain-only mode while keeping the same table structure for consistent downstream handling.
Get Started Free
sub_card_2.png

Support security assessments and attack surface reviews

Use Subdomain Finder to map external-facing assets during reconnaissance, vulnerability triage, and routine security audits. Teams can identify forgotten staging sites, legacy admin panels, or newly issued certificates that reveal additional services. The depth setting lets you balance speed and coverage, making it useful for quick checks during incident response as well as deeper periodic reviews of a company’s public footprint.
Get Started Free
sub_card_3.png

Improve domain management and operational research

Operations and engineering teams can use the output to maintain an inventory of active hostnames, verify DNS hygiene, and spot inconsistencies across environments. Researchers can compare subdomain lists over time to track infrastructure changes or monitor brand exposure. Because results are returned as a table with consistent columns, it’s easy to copy into spreadsheets, share with stakeholders, or feed into internal documentation workflows.
Get Started Free
sub_card_4.png

Discover More Free Tools

Technology stack checker

Analyze any website URL to identify its tech stack, including frameworks, CMS, analytics, hosting, and more. Get categorized results with versions when available to benchmark competitors and plan builds faster.

DKIM / DMARC checker

Check DKIM and DMARC DNS records for any domain to catch misconfigurations and improve email deliverability.

Website down checker

Check whether a website is reachable or down by entering a URL. Get clear status results to tell local connection issues from server outages.

WHOIS lookup

Look up domain registration records to see registrar, dates, status, and available contact details. Verify ownership and spot expiration risks fast.

Website traffic estimator

Estimate monthly organic traffic for any URL, plus top keywords and sources. Quickly gauge SEO visibility to prioritize pages, campaigns, and competitors.

IP address lookup

Look up location, ISP, and network details for any IP address. Get clear insights for diagnostics, security checks, and quick reference.

SSL checker

Check any site's SSL certificate status, expiry, issuer, and encryption details to confirm a secure connection.

Domain owner lookup

Look up public domain registration details to verify ownership and contact info. Save time finding the right responsible party for a website.

MX Record Lookup

Check a domain's mail exchange records to verify email routing, priorities, and DNS setup for faster troubleshooting.

Amazon Review Exporter

Extract detailed Amazon product reviews by pasting a product URL. Instantly collect reviewer info, ratings, and more in a structured table for easy analysis.

Product Details Scraper

Scrape product details from eCommerce sites like Amazon, Walmart, Shein, Lazada, and Zalando. Collect name, brand, price, images, ratings, and reviews in structured format for quick analysis or export.

Amazon Products Scraper

Extract product info from Amazon by pasting product URLs. Get titles, prices, ratings, and more in a structured table for quick export and review.

AI Sales Email Generator

Create personalized sales emails in seconds with the free AI Sales Email Generator. Perfect for sales teams and entrepreneurs. Try it now and boost your outreach with Thunderbit’s suite of AI tools.

Image to Excel Converter

Convert images of tables, receipts, or lists into structured JSON arrays for easy export to Excel. Save time on manual data entry and ensure accuracy.

AI Email Headline Generator

Generate compelling email subject lines from a brief description. Enhance open rates with AI-powered suggestions. Fast, simple, and no sign-up required.

Phone Number Extractor

Quickly scan webpages, files, or text to find phone numbers. Get a clean, exportable list in seconds—ideal for building contact lists or verifying data.

Find More Tools Now

What users say about Thunderbit

Taryn W.Growth Strategist@Thunderbit changed how I run competitor research. I click 'AI Suggest Fields,' and it builds a clean table across paginated results—no coding, no CSS. Huge time-saver when analyzing product data from long-tail marketplaces.
Miles T.Sales Development ConsultantI use Thunderbit to grab emails and phone numbers from directories. It extracts clean contact info in one click, and exporting to Sheets or Notion takes seconds. No extra setup, no coding—just usable data ready to work with.
Rhea C.E-commerce AnalystThunderbit helps me monitor SKU data across multiple pages. I scrape the listings, then use Subpage Scraping to pull full product specs, pricing, reviews, and stock. The AI organizes everything into columns I define.
Cassian B.Real Estate AdvisorThunderbit's Scheduled Scraper makes real estate tracking easier. I describe the interval in plain English, and it automatically pulls updated listings, prices, and links without touching the setup again. Simple and very practical.
Dorian B.Content & SEO SpecialistI use Thunderbit's Field AI Prompts to clean and tag scraped blog content. It extracts titles, authors, and even suggests categories. Works great across dynamic sites and subpages—perfect for building structured SEO datasets.
Lina K.Marketplace Operations LeadWe track SKUs from niche stores using Thunderbit. Cloud Scraping handles 50 pages at a time, and for login-required sites, we switch to browser mode. It’s fast, flexible, and doesn’t need ongoing maintenance or manual edits.
Jorge F.Inbound Sales ManagerThunderbit’s AI Autofill is a lifesaver. After scraping contact info, I use it to fill lead forms directly in my browser. I just select the tab, and it fills everything using the scraped row. No manual input needed.
Alina D.Freelance ResearcherI rely on Thunderbit for extracting data from PDFs, image-based sites, and infinite scroll pages. It handles messy formats with AI and delivers ready-to-export tables I can send to Google Sheets or Airtable in seconds.
Taryn W.Growth Strategist@Thunderbit changed how I run competitor research. I click 'AI Suggest Fields,' and it builds a clean table across paginated results—no coding, no CSS. Huge time-saver when analyzing product data from long-tail marketplaces.
Miles T.Sales Development ConsultantI use Thunderbit to grab emails and phone numbers from directories. It extracts clean contact info in one click, and exporting to Sheets or Notion takes seconds. No extra setup, no coding—just usable data ready to work with.
Rhea C.E-commerce AnalystThunderbit helps me monitor SKU data across multiple pages. I scrape the listings, then use Subpage Scraping to pull full product specs, pricing, reviews, and stock. The AI organizes everything into columns I define.
Cassian B.Real Estate AdvisorThunderbit's Scheduled Scraper makes real estate tracking easier. I describe the interval in plain English, and it automatically pulls updated listings, prices, and links without touching the setup again. Simple and very practical.
Dorian B.Content & SEO SpecialistI use Thunderbit's Field AI Prompts to clean and tag scraped blog content. It extracts titles, authors, and even suggests categories. Works great across dynamic sites and subpages—perfect for building structured SEO datasets.
Lina K.Marketplace Operations LeadWe track SKUs from niche stores using Thunderbit. Cloud Scraping handles 50 pages at a time, and for login-required sites, we switch to browser mode. It’s fast, flexible, and doesn’t need ongoing maintenance or manual edits.
Jorge F.Inbound Sales ManagerThunderbit’s AI Autofill is a lifesaver. After scraping contact info, I use it to fill lead forms directly in my browser. I just select the tab, and it fills everything using the scraped row. No manual input needed.
Alina D.Freelance ResearcherI rely on Thunderbit for extracting data from PDFs, image-based sites, and infinite scroll pages. It handles messy formats with AI and delivers ready-to-export tables I can send to Google Sheets or Airtable in seconds.

Frequently Asked Questions

Extract Data using AI
Easily transfer data to Google Sheets, Airtable, or Notion
Chrome Store Rating
PRODUCT HUNT#1 Product of the Week
© 2026 Thunderbit Inc. All rights reserved.