Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

20 hosts · 386 ms

HostCertsFirst seenLast seenDNS
pond5.com 3 2025-06-09 2026-05-10 ok
*.pond5.com 16 2025-06-09 2026-09-21 —
ftp2.pond5.com 3 2025-07-28 2026-06-28 ok
ftp3.pond5.com 3 2025-07-28 2026-06-28 ok
ftp4.pond5.com 3 2025-07-28 2026-06-28 ok
explore.pond5.com 2 2026-04-06 2026-09-06 ok
cloud.emktng.pond5.com 4 2025-07-30 2026-07-17 ok
image.emktng.pond5.com 5 2026-01-28 2026-09-23 ok
click.emktng.pond5.com 6 2025-07-28 2026-07-17 ok
view.emktng.pond5.com 4 2025-07-30 2026-07-17 ok
blog.pond5.com 3 2025-07-31 2026-07-01 ok
wpm.pond5.com 5 2025-07-29 2026-07-01 ok
ssgtm.pond5.com 6 2026-06-09 2026-09-16 ok
ftp.pond5.com 3 2025-07-28 2026-06-28 ok
contributor.pond5.com 3 2025-07-31 2026-07-01 ok
*.analytics.pond5.com 1 2026-01-03 2026-01-03 —
cms.pond5.com 2 2026-04-06 2026-09-06 ok
globals.cms.pond5.com 2 2026-04-06 2026-09-06 ok
ftp-test.pond5.com 3 2025-07-28 2026-06-28 ok
ht-proxy.pond5.com 8 2026-06-13 2026-09-21 ok

Programmatic access, with DNS A records: API GET /v1/hosts/pond5.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/pond5.com.