Find All Subdomains (2024)

FAQs

Is there a way to find all subdomains? ›

Google Dorking

Google Dorks are one of the best ways to find extenstive information about a target. Google's search operators make it easy to narrow down the search to find more subdomains. We can use the "site" operator in the search bar to find all the subdomains that Google has indexed for a domain.

Using nslookup online is very simple. Enter a domain name in the search bar above and hit 'enter'. This will take you to an overview of DNS records for the domain name you specified.

Subdomain Finder scans the DNS records and supplementary databases to analyze the domain's hierarchy. Our subdomain scanner checks: DNS records (NS, MX, TXT, AXFR) DNS enumeration. SSL certificates.

A domain can have up to 500 subdomains. You can create multiple levels of subdomains such as store.product.yoursite.com, test.forum.yoursite.com, etc. Each subdomain can be up to 255 characters long, but for multi level subdomains, each level can only be 63 characters long.

In most cases, having a subdomain is not ideal for SEO. Search engines view subdomains as two separate websites. This means that rankings, topical authority, and backlink authority are all split between the two domains.

subfinder is a subdomain enumeration tool written in the Go programming language. Subfinder is used for discovering passive subdomains of websites by using digital sources like Censys, Chaos, Recon. dev, Shodan, Spyse, Virustotal, and many other passive online sources.

You can usually locate it in the root or footer section of the website. For example, the XML sitemap URL could be “www.example.com/sitemap.xml“. Once you click on the sitemap, you will find all pages & subpages of a website. You can use different sitemap generation tools if you don't have an existing sitemap.

Can you track subdomains in Google Analytics? ›

In Google Analytics 4, users can be tracked cross-subdomains without the need for additional code. It should generally be handled using the same measurement ID and leveraging reporting, comparisons, and segments to address different subdomain data views.

Yes. you can verify your subdomain to be used in Google Search Console by linking your account to Google Analytics. This way you avoid customizing the theme of your help center. Go to www.google.com/analytics and set up a property within your Google Analytics account for your subdomain.

Use the command nslookup (this stands for Name Server Lookup) followed by the domain name or IP address you want to trace. Press enter. This command will simply query the Name Service for information about the specified IP address or domain name.

nslookup is an abbreviation of name server lookup and allows you to query your DNS service. The tool is typically used to obtain a domain name via your command line interface (CLI), receive IP address mapping details, and lookup DNS records.

To identify DNS entries within your organization that might be dangling, use Microsoft's GitHub-hosted PowerShell tools "Get-DanglingDnsRecords". This tool helps Azure customers list all domains with a CNAME associated to an existing Azure resource that was created on their subscriptions or tenants.

Using a dimension to filter by subdomain in GA4 reports

The default settings in GA4 allow you to see when users move between your domain and your subdomains. The fastest way is by using the Hostname dimension in the standard GA4 reports. You can, for example, use this in the Engagement report as follows.

The choice between subdomains and subdirectories largely depends on reasons outside of SEO. Both can be SEO-friendly. Whether you decide to use subdomains or subdirectories, you need to optimize them for the best chance of ranking in search engines.