Subdomain Finder

Probe a domain for common subdomains via DNS and list the ones that currently resolve.

Subdomains of aiatlas.com

Probed 51 common labels · found 51.

SubdomainIP addresses
admin.aiatlas.com 47.76.45.78
api.aiatlas.com 47.76.45.78
app.aiatlas.com 13.248.169.48, 76.223.54.146
apps.aiatlas.com 13.248.169.48, 76.223.54.146
assets.aiatlas.com 13.248.169.48, 76.223.54.146
autoconfig.aiatlas.com 47.76.45.78
autodiscover.aiatlas.com 47.76.45.78
beta.aiatlas.com 47.76.45.78
blog.aiatlas.com 47.76.45.78
cdn.aiatlas.com 13.248.169.48, 76.223.54.146
cloud.aiatlas.com 13.248.169.48, 76.223.54.146
cpanel.aiatlas.com 13.248.169.48, 76.223.54.146
dashboard.aiatlas.com 47.76.45.78
db.aiatlas.com 13.248.169.48, 76.223.54.146
dev.aiatlas.com 47.76.45.78
docs.aiatlas.com 47.76.45.78
ftp.aiatlas.com 47.76.45.78
git.aiatlas.com 47.76.45.78
gitlab.aiatlas.com 13.248.169.48, 76.223.54.146
help.aiatlas.com 47.76.45.78
images.aiatlas.com 13.248.169.48, 76.223.54.146
imap.aiatlas.com 47.76.45.78
img.aiatlas.com 47.76.45.78
jenkins.aiatlas.com 13.248.169.48, 76.223.54.146
login.aiatlas.com 47.76.45.78
m.aiatlas.com 13.248.169.48, 76.223.54.146
mail.aiatlas.com 47.76.45.78
media.aiatlas.com 47.76.45.78
mobile.aiatlas.com 47.76.45.78
monitor.aiatlas.com 47.76.45.78
mx.aiatlas.com 47.76.45.78
mx1.aiatlas.com 47.76.45.78
ns1.aiatlas.com 47.76.45.78
ns2.aiatlas.com 47.76.45.78
pop.aiatlas.com 47.76.45.78
portal.aiatlas.com 47.76.45.78
remote.aiatlas.com 13.248.169.48, 76.223.54.146
secure.aiatlas.com 47.76.45.78
shop.aiatlas.com 47.76.45.78
smtp.aiatlas.com 47.76.45.78
sql.aiatlas.com 47.76.45.78
staging.aiatlas.com 47.76.45.78
static.aiatlas.com 13.248.169.48, 76.223.54.146
status.aiatlas.com 47.76.45.78
store.aiatlas.com 13.248.169.48, 76.223.54.146
support.aiatlas.com 13.248.169.48, 76.223.54.146
test.aiatlas.com 47.76.45.78
vpn.aiatlas.com 47.76.45.78
webdisk.aiatlas.com 47.76.45.78
webmail.aiatlas.com 47.76.45.78
www.aiatlas.com 47.76.45.78

FAQ

Is this a full subdomain list?
No - it probes a curated list of common labels via DNS. It won't find every possible subdomain.
How does it work?
For each common label we ask DNS whether label.domain has an A record, entirely on our infrastructure.
Why do I see www and mail?
Those are among the most common subdomains and usually point to your site and mail servers.

About subdomain discovery

Subdomains often expose extra services (mail, VPN, staging, admin panels). Reviewing them helps you understand your attack surface and spot forgotten hosts.

This tool uses DNS brute-forcing of common labels only - no external enumeration service is queried.