Find subdomains (certificate logs)
subdomain_enumList known subdomains of a domain from public certificate-transparency logs. Passive: no traffic is sent to the target. Useful for attack-surface mapping of domains you own or are authorised to assess. Cost: 1 credit per call.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes |