Uncover hidden subdomains with our powerfulSubdomain Lookup

Use our subdomain finder to reveal subdomains, public or hidden, related to a domain. Our subdomain API uses an advanced subdomain scanner so security analysts and ethical hackers can find subdomains in seconds.

1[
2  {
3    "domain": "google.com",
4    "status": true,
5    "query_time": "2025-05-22T16:00:50.978835309",
6    "current_page": 3,
7    "total_pages": 182,
8    "total_records": 18128,
9    "subdomains": [
10      {
11        "subdomain": "liqckdx.sites.google.com",
12        "first_seen": "2022-05-17",
13        "last_seen": "N/A",
14        "inactive_from": "N/A"
15      },
16      {
17        "subdomain": "gkwpvg8.sites.google.com",
18        "first_seen": "2023-06-09",
19        "last_seen": "2025-05-01",
20        "inactive_from": "N/A"
21      },
22      {
23        "subdomain": "igc0b4i.sites.google.com",
24        "first_seen": "2023-12-02",
25        "last_seen": "2025-05-01",
26        "inactive_from": "N/A"
27      },
28      {
29        "subdomain": "ediscovery.google.com",
30        "first_seen": "2016-09-01",
31        "last_seen": "2025-05-20",
32        "inactive_from": "N/A"
33      },
34      {
35        "subdomain": "lnivsn4.sites.google.com",
36        "first_seen": "2022-05-24",
37        "last_seen": "N/A",
38        "inactive_from": "N/A"
39      },
40      {
41        "subdomain": "m6yg874.sites.google.com",
42        "first_seen": "2023-12-06",
43        "last_seen": "N/A",
44        "inactive_from": "N/A"
45      },
46      {
47        "subdomain": "12w2grv.sites.google.com",
48        "first_seen": "2023-06-10",
49        "last_seen": "N/A",
50        "inactive_from": "N/A"
51      },
52      {
53        "subdomain": "134s1fm.sites.google.com",
54        "first_seen": "2023-06-07",
55        "last_seen": "N/A",
56        "inactive_from": "N/A"
57      }
58    ]
59  }
60]

1528+

TLDs

690M+

Active Domains

877M+

Domains Tracked

3554M+

WHOIS Records

4931M+

Host Names

13B+

DNS Records

Features

What OurSubdomains SolutionOffers

Comprehensive subdomain discovery, powered by our Subdomains API and robust database.

Request a Quote

Contact Sales

Subdomain Enumeration

Subdomain Lookup will fetch all public or internal subdomains of a domain, mapping assets for reconnaissance and security.

Discovery Timeline

Includes timestamps for when each subdomain was first and last seen, like "first_seen": "2023-06-02".

Total Subdomain Count

Returns the total_records field (e.g., 22), giving an instant overview of the domain’s subdomain footprint.

Output Format

Data is returned in a clean JSON or XML formats that are easy to integrate with any third party service.

Subdomains Filtration

Filter subdomains by status (active/inactive) and refine results using inactive_from and last_seen dates.

Subdomains Data Updates

Get subdomain updates daily, weekly, or monthly-with monthly snapshots when real-time data isn't critical.

Up-to-date Data

Our crawlers scans internet 24/7 to deliver accurate, complete, and up-to-date data, so you can detect changes faster.

Downloadable CSV File

In addition to JSON and XML responses, users can also download the data as a CSV file from our Subdomain Lookup tool.

Use Cases

Subdomains in Action

Explore real-world use cases of our Subdomains API and database to track, analyze, and secure subdomains.

Brand Protection

Monitor impersonated and typo-squatted subdomains abusing your brand. Catch lookalikes and act early.

Attack Surface Management

Inventory all exposed subdomains to eliminate blind spots. Use the data to reduce external attack paths.

Threat Detection & Prevention

Detect suspicious subdomains tied to phishing, malware delivery, MiTM, DDoS, or takeover attempts.

Security Auditing

Audit subdomains for misconfigurations, legacy endpoints, and weak DNS or hosting setups.

Domain Expiry & Cleanup

Identify orphaned subdomains tied to decommissioned services and vendors. Retire or redirect them to prevent abuse.

Competitive Intelligence

Analyze competitor subdomains to spot new test products, regional rollouts, and infrastructure changes.

Integrate Subdomains API to uncover every subdomain and protect your infrastructure. Detect shadow assets, reduce attack surface.

Request Demo

Subdomains Lookup API

The Subdomains API retrieves all subdomains under a given domain, including nested ones. For example, querying api.whoisfreaks.com will return all domains beneath that subdomain. It supports after and before filters to fetch subdomains created after or before a specified date, and a status filter to return active, inactive, or both types of subdomains.

Authorization

You can make authorized requests to our API by passing API key as a query parameter. To get your API key, login to our billing dashboard and get your API key! If your API key has been compromised, you can change it by clicking on reset button in billing dashboard.

Query Parameters

Required

apiKey
Get your API key from our billing dashboard.
domain
The domain for which you would like to retrieve subdomains.

Optional

after
To fetch records created after a specific date. Defaults to the oldest domain record.
before
To fetch records created before a specific date. Defaults to the current date.
status
Two statuses are available: inactive and active. active fetches all active subdomains, and inactive fetches all inactive subdomains. To fetch both, do not include this parameter.
page
Specify Page number to access specific page's data. If you don't pass 'page' parameter, default page is 1.
format
Two formats are available JSON, XML. If you don't specify the 'format' parameter, the default format will be JSON.

Request

SHELL

Loading request...

Response

Loading response...

Status Codes

Success Codes

200Request is processed successfully.

Failure Codes

400The domain name field is required and cannot be left empty or null. Please provide a valid domain name to proceed.
401Provided API key is invalid.
401Provided API key is inactive.
401Please buy a subscription plan or add api credits, then use this api key.
401Your subscription is deactivated. Please buy new plan or add api credits for using whoisfreaks APIs.
401Your subscription is deactivated due to much time payment failure. Please buy a new plan or add api credits for using whoisfreaks APIs.
401Your account is deactivated.
401You are blocked due to suspicious activity.
412You have exceeded the limit of api plan requests and your subscription is canceled.
413You have exceeded the limit of api credits requests [allowed_request_no]. Please upgrade your plan.
413You have exceeded the limit of Surcharge Requests [allowed_surcharge_request_no]. Please upgrade your plan.
429Please slow down. Your maximum request limit per minute is reached.
500Internal Server error occurred.
503Service is unavailable. Please try after some time.
504Request is timed-out.