You can access the Subdomain Takeover Risk Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "subdomains": ["test.example.com"] }
9
10# Run the Actor and wait for it to finish
11run = client.actor("unrivaled_fortress/subdomain-takeover-risk-scanner").call(run_input=run_input)
12
13# Fetch and print Actor results from the run's dataset (if there are any)
14print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
15for item in client.dataset(run.default_dataset_id).iterate_items():
16    print(item)
17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Subdomain Takeover Risk Scanner API in Python

The Apify API client for Python is the official library that allows you to use Subdomain Takeover Risk Scanner API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Subdomain Takeover Risk Scanner API in JavaScript

Subdomain Takeover Risk Scanner API through CLI

Subdomain Takeover Risk Scanner OpenAPI definition

Subdomain Takeover Risk Scanner API

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

DNS Lookup – Bulk DNS Records, MX, SPF & DMARC Checker

gazidev/bulk-dns-lookup

Bulk DNS lookup for thousands of domains: A, AAAA, MX, NS, TXT, CNAME, SOA, CAA records, SPF checker with 10-lookup limit, DMARC policy & rua, DKIM selectors, MTA-STS, BIMI, reverse DNS, change monitoring. Pick resolver: 1.1.1.1, 8.8.8.8 or custom. $1 per 1,000 domains.

Cemal Atakli

🛡️ Subdomain Finder, Attack Surface & SSL OSINT Scanner

unrivaled_fortress/ssl-certificate-checker

SSL Labs-style certificate inspector: paste domains, get issuer, validity dates, days-to-expiry, SANs, TLS version, cipher and a security grade (A+→F) for every host. No API key, no proxy.

David A

Xing Scraper

mlg14/xing-scraper

Scrape public Xing jobs by keyword, location, date or saved search URL. Export job titles, employers, locations, pay, application links and full descriptions.

MLG Data

Pdf Invoice Table Extraction

first_watch/pdf-invoice-table-extraction

Automation workflows need to convert varied native-text or scanned invoices into consistent accounting-ready line items while detecting uncertain fields and arithmetic mismatches before downstream import.

Jordan Nabbe

Subdomain Discovery API

crawland/subdomain-discovery-api

Paginated subdomain enumeration for any registered domain — DNS records, registrar, WHOIS, vendor reputation, and category labels per subdomain, served from the Crawland threat-intelligence backend.

Crawland

Domain WHOIS Lookup (RDAP): Dates, Registrar, NS | $1/1K

one_dollar_store/domain-whois-rdap-lookup

$1 per 1,000 results, platform usage included. Registration data for a list of domains from the registries' official RDAP servers: registrar, created, updated and expiry dates, status, name servers and DNSSEC. Owner details only where the registry shows them.

One Dollar Store

Podcast Migration Checker

agentworks-lab/podcast-migration-checker

Compare old and new podcast RSS feeds for lost episodes, changed GUIDs, and migration redirect mistakes. Get actionable findings before or after switching hosts.

Jacob Fritz

GitHub Repository & User Search (Official API)

taroyamada/github-repo-user-search

Search GitHub repositories and users/organizations with the official REST API. Get topics, stars, forks, languages, last push, license and organization profile. No email extraction. Works without a token.