Discover subdomains for a root domain
POST/api/v1/workspaces/:id/domain-checker/lookup
Runs passive subdomain discovery with subfinder's default behavior for publicly known hostnames under the given root domain. It does not scan private DNS or internal network records. Results may be slow, partial, or capped; clients should use a long HTTP timeout. Lookup requests are rate limited per workspace and user.
Request
Responses
- 200
- 400
- 409
- 429
- 500
- 502
- 503
- 504
Passive subdomain discovery results
Bad request
A lookup is already running for this workspace and domain
Domain checker lookup rate limited
Internal server error
Discovery tool error or invalid response
Discovery tools unavailable or all sources failed
Domain discovery lookup timed out