When you set up integration with Cloudflare, the service automatically scans DNS records and shows everything found in a structured form. Instead of manually searching for subdomains, you can get the list directly from the service, which greatly speeds up analysis and sometimes even reveals real IP addresses that might have remained unknown.

Guide Link to heading

I will show you the example of the site of a popular mobile game - standoff365.com

1. Log in to https://dash.cloudflare.com/login.

2. Find the “Add a domain” button

3. Enter the desired domain name and check the Quick scan for DNS records box

4. Our subscription is free, we are not millionaires

5. Then Cloudflare does the magic

6. And we get a list of subdomains of the site we need, and even with IP addresses