subdomains
Subdomains of a domain from certificate transparency logs, passive DNS and DNS brute force.
live lists hosts that resolve now, each with its IP; subdomains lists every name found, live
first; pools summarises large shared-infrastructure zones. The first lookup of a domain is a fast
snapshot and later ones are fuller; set wait=true to wait for every source (up to about 20 s).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| wait | No | ||
| limit | No | ||
| domain | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||