{"uid":"cap_l_GynAzGL8qDlIqX6joX7","slug":"scout-packs-subdomain-footprint-lookup-00d4fc08","name":"Scout Packs — Subdomain Footprint Lookup","description":"Verified B2B lead packs and per-lead enrichment lookups for agents. $0.01 per lookup or pack (demand probe). USDC on Base via x402. No account, API key, or subscription.","url":"https://scout-packs-production.up.railway.app/subdomains?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain to map the subdomain footprint for (e.g. 'acme.com')."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"count":{"type":"number"},"domain":{"type":"string"},"receipt":{"type":"string"},"signals":{"type":"array"},"categories":{"type":"object"},"subdomains":{"type":"array"},"wildcard_detected":{"type":"boolean"}}}}}}},"responseSchema":{"type":"json","example":{"count":3,"domain":"acme.com","receipt":"ok","signals":[],"categories":{},"subdomains":["www.acme.com"],"wildcard_detected":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_MhXBYkxSzWbHiYxWxrHkM","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a list of discovered subdomains for a given domain, along with categorization signals and wildcard detection.","exampleAgentPrompt":"Can you map the subdomain footprint for stripe.com — I want to see all the subdomains they're running and whether there's a wildcard DNS in place?","exampleUseCases":[{"title":"Competitive web infrastructure research","prompt":"Pull up all the subdomains for salesforce.com so I can see what products and environments they're running publicly."},{"title":"B2B prospect domain profiling","prompt":"Before our sales call, can you enumerate all the subdomains on hubspot.com and tell me if they have wildcard DNS set up?"},{"title":"Security recon pre-engagement","prompt":"I need a full subdomain map for example-client.com — list every subdomain you can find and flag if a wildcard is detected."}],"resultDescription":"A JSON object containing the queried domain, an array of discovered subdomains, total count, a wildcard_detected boolean, categorized subdomain groupings, any signals of interest, and a payment receipt confirmation.","failureModes":["Missing or invalid domain query parameter returns an error","Domain with no discoverable subdomains returns an empty array","Wildcard DNS may inflate or obscure real subdomain enumeration results","Payment failure via x402 prevents data return","Rate limiting or infrastructure downtime on Railway may cause timeouts"],"whenToPreferThis":"Use this endpoint when you need a quick, pay-per-call subdomain enumeration for a specific domain without setting up an account or API key. It is well-suited for agent-driven B2B research workflows where subdomain intelligence is needed on demand and cost must be kept minimal ($0.02 per call). Prefer this over full DNS scraping tools when you want structured JSON output with categorization and wildcard detection out of the box.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:43:06.124Z","isFirstParty":false,"canonicalSlug":"scout-packs-subdomain-footprint-lookup-00d4fc08"}