Subdomain Discovery API — DNS Brute-Force Enumeration

Description

Enumerate subdomains by testing common subdomain names against DNS. Discovers active subdomains like www, mail, api, dev, staging, cdn, and many more.

Essential for security assessments — forgotten subdomains are a common attack vector. Also useful for mapping an organization's infrastructure.

Use Cases

Security assessment — find forgotten or exposed subdomains
Map target organization infrastructure
Discover API endpoints and staging environments
Asset inventory for IT teams

Parameters

Name	Type	Required	Description
`domain`	string	Yes	Domain name to enumerate
`format`	string	No	Response format: json or markdown

Example Request

bash

curl -H 'X-API-Key: YOUR_KEY' \
  'https://api.example.com/dns/subdomains?domain=example.com'

python

import httpx

resp = httpx.get(
    "https://api.example.com/dns/subdomains?domain=example.com",
    headers={"X-API-Key": "YOUR_KEY"},
)
print(resp.json())

javascript

const resp = await fetch("https://api.example.com/dns/subdomains?domain=example.com", {
  headers: { "X-API-Key": "YOUR_KEY" },
});
const data = await resp.json();
console.log(data);

Example Response

json

{
  "domain": "example.com",
  "subdomains": [
    {"name": "www.example.com", "records": [{"type": "A", "value": "93.184.216.34"}]},
    {"name": "mail.example.com", "records": [{"type": "A", "value": "93.184.216.35"}]}
  ],
  "total_found": 2
}

Subdomain Discovery

Description

Use Cases

Parameters

Related Tools in Domain

WHOIS Lookup

Bulk WHOIS Lookup

Domain Age Checker

Domain Availability

Bulk Domain Availability

TLD Search