---
title: "Enumerate subdomains for a target domain by querying Certificate Transparency logs (crt.sh) and DNS resolution. Returns deduplicated, sorted list."
method: GET
path: "/v1/tools/subdomain-finder"
tags: ["Free tools"]
---

# Enumerate subdomains for a target domain by querying Certificate Transparency logs (crt.sh) and DNS resolution. Returns deduplicated, sorted list.

`GET /v1/tools/subdomain-finder`

## Request

- Base URL: `https://api.domainee.dev`
- URL: `https://api.domainee.dev/v1/tools/subdomain-finder`
- Auth: none required

Enumerate subdomains for a target domain by querying Certificate Transparency logs (crt.sh) and DNS resolution. Returns deduplicated, sorted list.

Free and keyless: no Authorization header, CORS enabled for browser callers.
Rate limited per IP at 30 requests/minute and 500/day; the
`x-ratelimit-remaining-minute` and `x-ratelimit-remaining-day` response
headers report what is left.

Example: `curl -s "https://api.domainee.dev/v1/tools/subdomain-finder?domain=domainee.dev" | jq`

## Query parameters

- `domain` string, required

## Response `200`

Lookup completed.

- ToolResult: The envelope every free tool returns. `data` is tool-specific.
  - `ok` true, required
  - `data` object, required

## Other responses

- `400`: The lookup could not be completed.
- `429`: The lookup could not be completed.
- `502`: The lookup could not be completed.

---

[API](https://skmtc.dev/domainee/apis/domainee-api.md) · [All operations](https://skmtc.dev/domainee/apis/domainee-api/llms.txt) · [OpenAPI document](https://skmtc.dev/domainee/apis/domainee-api/revisions/756d54434372?raw)