host.tools

Subdomain enumerator

Domain /api/v1/domain/subdomains

Discover subdomains via Certificate Transparency logs (crt.sh).

Try: host.com checkhost.com crypt.tools marketcap.to tokencalculator.com
Related: DNS lookup (dig) DNS propagation Domain WHOIS SSL certificate inspector HTTP headers Security headers grader MX lookup SPF tester DMARC tester
Domain
dev.polis.ac
Total found
11
Source
CT logs
Truncated
no
2a57j77sc0py9jmmql0i0yzmbha09k4.stoa.dev.polis.ac 2a57j77tu5nhb0sgjkr17mmawm05qwj.agora.dev.polis.ac 2a57j77wr6hi3eq5vhicoxaf2flrodm.oikos.dev.polis.ac 2a57j78h5fsbzb7ey72hbx9c01pbxcf.stoa.dev.polis.ac adminauth.dev.polis.ac agora.dev.polis.ac oikos.dev.polis.ac stoa.dev.polis.ac www.agora.dev.polis.ac www.oikos.dev.polis.ac www.stoa.dev.polis.ac
How to use Subdomain enumerator
  1. 1
    Paste your input

    Enter the value at the top — domain, IP, URL, email, ASN, hash, whatever fits this tool. The smart input auto-detects type.

  2. 2
    Click "Inspect"

    host.tools issues real probes (DNS, HTTP, TCP, TLS, WHOIS where applicable) and renders the result in milliseconds.

  3. 3
    Open the API tab

    Every web tool has a sibling /api/v1/domain/subdomains JSON endpoint with the same payload. One copy-as-curl click and you're scripting it.

Why this matters

WHOIS, expiry, DNSSEC, name servers — domain metadata is the single most-overlooked outage source. Lock it down before someone else does.

API equivalent
/api/v1/domain/subdomains?q=dev.polis.ac 
curl -s '/api/v1/domain/subdomains?q=dev.polis.ac'
Embed this tool
<iframe src="/domain/subdomains?q={INPUT}&embed=1"
  width="100%" height="600" frameborder="0"></iframe>

Drop into any HTML page. The embed=1 flag hides nav and footer.

FAQ · Subdomain enumerator

Common questions

Is Subdomain enumerator free?
Yes — every tool is free on the web with a 200/hour rate limit per IP. The matching API endpoint /api/v1/domain/subdomains is free up to 100 requests/hour, no key required.
Where does the data come from?
Real-time probes against authoritative sources (DNS root, RIRs, registries, the target server itself), plus partner data feeds from hostinfo.com (GeoIP/ASN) and hostcheck.com (reputation).
How fresh are the results?
Live by default. Cached for 5 minutes to make repeat queries instant; pass ?nocache=1 for a forced refresh.
Can I run this from the command line?
Yes — every tool ships with a copy-as-curl. There's also an official CLI: host.tools domain subdomains YOUR_INPUT.
Can I monitor results over time?
Pro tier lets you schedule any tool to run every 1/5/15/60 min and alert on diff. See monitors.
host.tools Pro

Run Subdomain enumerator on a schedule. Get pinged when it changes.

Pro gets you bulk lookups, monitors, webhook alerts, history, exports and 10,000 API calls/day. $19/mo.

See pricing Tour monitors
  • ✓Schedule any tool — every 1, 5, 15, 60 min
  • ✓Diff against last run, alert on change
  • ✓Webhook + email + Slack + PagerDuty + OpsGenie
  • ✓Bulk CSV upload, 1,000 inputs per job
  • ✓Export results as CSV / NDJSON / Excel
  • ✓90-day history, comparison view