Subdomain Finder
Probe a domain for common subdomains via DNS and list the ones that currently resolve.
Subdomains of buyhen.com
Probed 51 common labels · found 51.
| Subdomain | IP addresses |
|---|---|
| admin.buyhen.com | 13.248.169.48, 76.223.54.146 |
| api.buyhen.com | 13.248.169.48, 76.223.54.146 |
| app.buyhen.com | 13.248.169.48, 76.223.54.146 |
| apps.buyhen.com | 13.248.169.48, 76.223.54.146 |
| assets.buyhen.com | 13.248.169.48, 76.223.54.146 |
| autoconfig.buyhen.com | 13.248.169.48, 76.223.54.146 |
| autodiscover.buyhen.com | 13.248.169.48, 76.223.54.146 |
| beta.buyhen.com | 13.248.169.48, 76.223.54.146 |
| blog.buyhen.com | 13.248.169.48, 76.223.54.146 |
| cdn.buyhen.com | 13.248.169.48, 76.223.54.146 |
| cloud.buyhen.com | 13.248.169.48, 76.223.54.146 |
| cpanel.buyhen.com | 13.248.169.48, 76.223.54.146 |
| dashboard.buyhen.com | 13.248.169.48, 76.223.54.146 |
| db.buyhen.com | 13.248.169.48, 76.223.54.146 |
| dev.buyhen.com | 13.248.169.48, 76.223.54.146 |
| docs.buyhen.com | 13.248.169.48, 76.223.54.146 |
| ftp.buyhen.com | 13.248.169.48, 76.223.54.146 |
| git.buyhen.com | 13.248.169.48, 76.223.54.146 |
| gitlab.buyhen.com | 13.248.169.48, 76.223.54.146 |
| help.buyhen.com | 13.248.169.48, 76.223.54.146 |
| images.buyhen.com | 13.248.169.48, 76.223.54.146 |
| imap.buyhen.com | 13.248.169.48, 76.223.54.146 |
| img.buyhen.com | 13.248.169.48, 76.223.54.146 |
| jenkins.buyhen.com | 13.248.169.48, 76.223.54.146 |
| login.buyhen.com | 13.248.169.48, 76.223.54.146 |
| m.buyhen.com | 13.248.169.48, 76.223.54.146 |
| mail.buyhen.com | 13.248.169.48, 76.223.54.146 |
| media.buyhen.com | 13.248.169.48, 76.223.54.146 |
| mobile.buyhen.com | 13.248.169.48, 76.223.54.146 |
| monitor.buyhen.com | 13.248.169.48, 76.223.54.146 |
| mx.buyhen.com | 13.248.169.48, 76.223.54.146 |
| mx1.buyhen.com | 13.248.169.48, 76.223.54.146 |
| ns1.buyhen.com | 13.248.169.48, 76.223.54.146 |
| ns2.buyhen.com | 13.248.169.48, 76.223.54.146 |
| pop.buyhen.com | 13.248.169.48, 76.223.54.146 |
| portal.buyhen.com | 13.248.169.48, 76.223.54.146 |
| remote.buyhen.com | 13.248.169.48, 76.223.54.146 |
| secure.buyhen.com | 13.248.169.48, 76.223.54.146 |
| shop.buyhen.com | 13.248.169.48, 76.223.54.146 |
| smtp.buyhen.com | 13.248.169.48, 76.223.54.146 |
| sql.buyhen.com | 13.248.169.48, 76.223.54.146 |
| staging.buyhen.com | 13.248.169.48, 76.223.54.146 |
| static.buyhen.com | 13.248.169.48, 76.223.54.146 |
| status.buyhen.com | 13.248.169.48, 76.223.54.146 |
| store.buyhen.com | 13.248.169.48, 76.223.54.146 |
| support.buyhen.com | 13.248.169.48, 76.223.54.146 |
| test.buyhen.com | 13.248.169.48, 76.223.54.146 |
| vpn.buyhen.com | 13.248.169.48, 76.223.54.146 |
| webdisk.buyhen.com | 13.248.169.48, 76.223.54.146 |
| webmail.buyhen.com | 13.248.169.48, 76.223.54.146 |
| www.buyhen.com | 13.248.169.48, 76.223.54.146 |
FAQ
Is this a full subdomain list?
No - it probes a curated list of common labels via DNS. It won't find every possible subdomain.
How does it work?
For each common label we ask DNS whether label.domain has an A record, entirely on our infrastructure.
Why do I see www and mail?
Those are among the most common subdomains and usually point to your site and mail servers.
About subdomain discovery
Subdomains often expose extra services (mail, VPN, staging, admin panels). Reviewing them helps you understand your attack surface and spot forgotten hosts.
This tool uses DNS brute-forcing of common labels only - no external enumeration service is queried.