Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

15 hosts · 276 ms

HostCertsFirst seenLast seenDNS
bulls.com 18 2025-08-28 2026-09-19 ok
*.bulls.com 18 2025-08-21 2026-08-20 —
www1.bulls.com 3 2026-07-15 2026-09-19 ok
www.www1.bulls.com 2 2026-07-15 2026-07-15 nodata
links2g.bulls.com 5 2026-05-18 2026-09-15 ok
link.bulls.com 2 2026-02-22 2026-07-10 ok
shop.bulls.com 13 2026-04-16 2026-09-28 ok
support.shop.bulls.com 10 2026-05-12 2026-09-07 ok
blogs.bulls.com 3 2026-07-15 2026-09-19 ok
www.blogs.bulls.com 2 2026-07-15 2026-07-15 nodata
memorabulls.bulls.com 5 2026-05-31 2026-09-28 ok
nft.bulls.com 3 2026-06-01 2026-08-10 ok
blogtest.bulls.com 2 2026-07-15 2026-07-15 nodata
www.blogtest.bulls.com 3 2026-07-15 2026-09-19 nodata
www.bulls.com 4 2026-07-15 2026-09-19 ok

Programmatic access, with DNS A records: API GET /v1/hosts/bulls.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/bulls.com.