Google Subdomains (D) alternatives
6 tools in the catalogue cover the same ground as Google Subdomains (D) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- AltDNS (T)freePermutation-based DNS tool that generates and resolves alternative subdomains from known names.
- Aquatone (T)freeGo-based tool for domain reconnaissance that automates subdomain discovery, HTTP service scanning, screenshot capture, and visual HTML report generation for attack surface analysis.
- Bluto (T)freeRecon utility for domain intelligence including DNS records, email patterns, and infrastructure clues.
- C99.nlfreemiumMulti-purpose web-based recon toolset covering subdomain finder, reverse IP, whois, phone lookup, port scanner, malware scanner and more — 20+ tools in one.
- DNS Recon (T)freePython-based DNS enumeration script supporting zone transfers, standard record enumeration, TLD expansion, DNS brute force, and PTR lookups.
- dnspop (T)freeDNS reconnaissance utility for enumerating records and identifying domain-related infrastructure.
Google Subdomains (D)
Domain Name
Also written Google Subdomains, GoogleSubdomains
Google Dork technique using the 'site:' operator to enumerate subdomains of a target domain via Google's search index.
RECOMMENDED USE
Indexed subdomain discovery, publicly visible subdomain enumeration
Information
Video tutorials
Learn to use Google Subdomains (D)
Suggested workflow
Chain these tools in order for a complete investigation
Combine with
These tools work great together
Similar tools
These tools can also help you
crt.sh - Certificate Search
Domain NameCT log viewer aggregating certificate data from multiple Certificate Transparency logs. Search for all certificates ever issued to a domain to discover subdomains and detect certificate misuse.
DNS Dumpster
Domain NameFree domain research tool that discovers hosts and subdomains related to a domain. Provides DNS record enumeration (MX, TXT, Host) with a visual map of discovered infrastructure.
Phonebook.cz
Domain NameFree OSINT intelligence tool for enumerating subdomains, email addresses and URLs associated with a target domain by querying passive DNS and certificate data.
RapidDNS
Domain NameFast subdomain and reverse DNS lookup tool. Enumerate subdomains, find domains sharing an IP, discover certificate transparency data and perform bulk DNS queries.
User reviews
Be the first to leave a review