Is this just searching certificate transparency logs?
I have subdomains with (non-wildcard) certificates that aren't on there.
[dead]
Enumerate all the subdomains for a domain name
21–25 of 25 posts
Re: Enumerate all the subdomains for a domain name
#22How strange. I just tried this out and I see two unauthorised subdomains, with one being an actual "spam" website. However, I don't even know how to delete a subdomain that doesn't show up in my domain registrar or cloudflare!
Thanks for the tool.
Re: Enumerate all the subdomains for a domain name
#23Doesn't seem to work if you have wildcard records, e.g.
https://www.merklemap.com/search?query=marginalia.nu&page=1
doesn't catch the fact that I have like 20 viable subdomains for marginalia.nu.
Re: Enumerate all the subdomains for a domain name
#24Doesn't seem to work if you have wildcard records, e.g. https://www.merklemap.com/search?query=marginalia.nu&page=1 doesn't catch the fact that I have like 20 viable subdomains for marginalia.nu.
Yup. I can see the ones I registered without a wildcard, but all the ones I created after that are hidden.
Re: Enumerate all the subdomains for a domain name
#25Found only 43 subdomains for *.wordpress.com.