subscope 🔭

passive subdomain finder. certificate transparency logs only - zero packets touch the target. free, no signup.

queries certspotter + crt.sh certificate transparency logs. 100% passive - safe for bug bounty recon, no active scanning.
0subdomains
0wildcards