{"uid":"cap_Ci1_u5BovetQ4CJspZubJ","slug":"x402-deployer-x402-deployer-workers-dev-d8f36197","name":"Subdomain Enumeration via Certificate Transparency (crt.sh)","description":"Subdomain enumeration / attack-surface mapping / DNS recon. Certificate Transparency log mining (crt.sh). All-public data. Each subdomain with first-seen, last-seen, cert count.","url":"https://x402-deployer.x402-deployer.workers.dev/subdomain-enum","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":{"request":{"input":{"body":{"domain":"example.com","include_wildcards":false},"type":"http","method":"POST","bodyType":"json"}},"response":{"notes":"Subdomains here have appeared in TLS certificates. They may not currently resolve. Use a DNS resolver to verify liveness.","domain":"example.com","source":"Certificate Transparency logs via crt.sh","subdomains":[{"hostname":"as207960 test intermediate - example.com","last_seen":"2031-08-29T15:55:23","cert_count":2,"first_seen":"2021-08-31T15:55:23","distinct_issuer_count":1},{"hostname":"dev.example.com","last_seen":"2018-07-14T23:59:59","cert_count":1,"first_seen":"2016-07-14T00:00:00","distinct_issuer_count":1},{"hostname":"example.com","last_seen":"2033-01-24T01:21:18","cert_count":105,"first_seen":"2014-11-06T00:00:00","distinct_issuer_count":17},{"hostname":"m.example.com","last_seen":"2017-07-14T23:59:59","cert_count":1,"first_seen":"2016-07-14T00:00:00","distinct_issuer_count":1},{"hostname":"m.testexample.com","last_seen":"2017-07-14T23:59:59","cert_count":1,"first_seen":"2016-07-14T00:00:00","distinct_issuer_count":1},{"hostname":"products.example.com","last_seen":"2018-07-14T23:59:59","cert_count":1,"first_seen":"2016-07-14T00:00:00","distinct_issuer_count":1},{"hostname":"subjectname@example.com","last_seen":"2011-10-01T16:32:00","cert_count":2,"first_seen":"2010-09-02T16:36:49","distinct_issuer_count":1},{"hostname":"support.example.com","last_seen":"2018-07-14T23:59:59","cert_count":1,"first_seen":"2016-07-14T00:00:00","distinct_issuer_count":1},{"hostname":"user@example.com","last_seen":"2033-01-24T01:21:18","cert_count":1,"first_seen":"2023-01-27T01:21:18","distinct_issuer_count":1},{"hostname":"www.example.com","last_seen":"2026-12-02T23:59:59","cert_count":31,"first_seen":"2014-11-06T00:00:00","distinct_issuer_count":8}],"subdomain_count":10,"cert_log_entries_examined":69}},"exampleRequest":{"domain":"example.com","include_wildcards":false},"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JEf98Cll9WZLyoT-UG8-I","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Enumerates subdomains for a given domain by querying Certificate Transparency logs via crt.sh, returning each subdomain with first-seen, last-seen, and certificate count.","exampleAgentPrompt":"Can you enumerate all subdomains for example.com using certificate transparency logs and show me when each one was first and last seen?","exampleUseCases":null,"resultDescription":"A list of discovered subdomains for the queried domain, each with a first-seen timestamp, last-seen timestamp, and the number of certificates observed for that subdomain in CT logs.","failureModes":["Domain not found in crt.sh — returns empty list","Invalid or malformed domain input — returns error","crt.sh upstream timeout or unavailability — returns upstream error","Rate limiting by crt.sh backend — may return partial results or error","Payment failure (x402) — request not processed"],"whenToPreferThis":"Use this endpoint when you need passive subdomain discovery without active scanning, relying on public certificate transparency logs for comprehensive historical subdomain data including first/last seen metadata. Ideal for OSINT, attack surface mapping, and reconnaissance workflows where stealth and passivity matter.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:52:02.294Z","isFirstParty":false}