Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

48 hosts · 409 ms

HostCertsFirst seenLast seenDNS
nordvpn.com 124 2025-10-01 2026-10-05 ok
*.nordvpn.com 28 2025-10-01 2026-09-30 —
front-message-broker1.nordvpn.com 8 2026-06-05 2026-10-01 nodata
labs1.nordvpn.com 9 2026-06-05 2026-10-01 nodata
dns1.nordvpn.com 2 2025-09-03 2026-09-16 ok
www.dns1.nordvpn.com 2 2025-09-03 2026-09-16 nxdomain
dns2.nordvpn.com 2 2025-09-03 2026-09-16 ok
www.dns2.nordvpn.com 2 2025-09-03 2026-09-16 nxdomain
turbocache.nordvpn.com 26 2026-04-12 2026-10-01 ok
nc-auth-local.nordvpn.com 3 2026-02-03 2026-05-13 nodata
core-internal.nordvpn.com 5 2026-04-18 2026-09-14 ok
ref-internal.nordvpn.com 3 2026-08-20 2026-09-03 ok
api-internal.nordvpn.com 12 2026-05-19 2026-08-14 ok
core-api-internal.nordvpn.com 2 2026-09-23 2026-09-23 nodata
tpvt-url-filter-ml-api-internal.nordvpn.com 3 2026-07-06 2026-09-04 ok
tpvt-feeds-phishing-detection-api-internal.nordvpn.com 3 2026-07-06 2026-09-04 ok
tpvt-whois-api-internal.nordvpn.com 1 2026-09-23 2026-09-23 ok
tokens-api-internal.nordvpn.com 10 2026-05-23 2026-08-14 ok
tpvt-screenshot-api-internal.nordvpn.com 3 2026-07-06 2026-09-04 ok
tpvt-scam-ml-internal.nordvpn.com 3 2026-07-06 2026-09-04 ok
refer-internal.nordvpn.com 10 2026-05-24 2026-09-21 ok
url-shortener-manager-internal.nordvpn.com 4 2026-05-31 2026-07-30 ok
breach-scanner-internal.nordvpn.com 14 2026-05-18 2026-08-14 ok
appartner-internal.nordvpn.com 6 2026-05-02 2026-08-30 ok
payment-callback-receiver-internal.nordvpn.com 2 2026-09-29 2026-09-29 nodata
webhooks-internal.nordvpn.com 12 2026-05-20 2026-09-23 ok
configurations-internal.nordvpn.com 5 2026-06-01 2026-09-29 ok
promotions-internal.nordvpn.com 5 2026-05-01 2026-08-29 ok
front-nordvpn-main-client-us-internal.nordvpn.com 11 2026-04-25 2026-08-11 ok
merchant-internal.nordvpn.com 5 2026-04-18 2026-09-14 ok
front-nordvpn-main-client-eu-internal.nordvpn.com 11 2026-04-25 2026-08-11 ok
inventory-internal.nordvpn.com 12 2026-04-22 2026-09-23 ok
cm.nordvpn.com 8 2026-05-06 2026-07-11 ok
front-message-broker.nordvpn.com 18 2026-06-03 2026-10-01 ok
front-cache-worker.nordvpn.com 6 2026-06-04 2026-09-30 ok
labs.nordvpn.com 19 2026-04-11 2026-10-05 ok
applytics.nordvpn.com 17 2025-08-24 2026-10-01 ok
*.applytics.nordvpn.com 13 2026-04-10 2026-10-01 —
affiliates.nordvpn.com 2 2025-06-10 2026-07-08 ok
meshnet.nordvpn.com 13 2026-06-05 2026-10-01 ok
content.nordvpn.com 4 2026-04-11 2026-08-27 ok
support.nordvpn.com 6 2026-04-20 2026-09-23 ok
nc-mqtt.nordvpn.com 1 2026-02-04 2026-02-04 ok
preview.nordvpn.com 10 2026-04-13 2026-08-10 ok
survey.nordvpn.com 10 2026-04-15 2026-06-14 nodata
payments-readonly.nordvpn.com 4 2026-05-23 2026-07-22 ok
proxy.nordvpn.com 2 2025-06-25 2026-07-01 nodata
*.proxy.nordvpn.com 2 2025-06-25 2026-07-01 —

Programmatic access, with DNS A records: API GET /v1/hosts/nordvpn.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/nordvpn.com.