Passive Cartography.
5.1 Billion Records.

We blend Certificate Transparency logs, X.509 data, and passive DNS to map internet infrastructure. No active scanning. Pure reconnaissance. 

curl -H "Authorization: Bearer $KEY" \
  https://api.sub.md/v1/scan?domain=example.com

> "admin.example.com"
> "dev-cluster-01.internal.example.com"
> "jenkins.k8s.example.com"
> Found 14,203 records in 0.04s...
Request Access
Private Alpha. If you don't take NXDOMAIN for an answer, you're invited.