Run subdomain scan Domain or URL Custom candidate labels (optional, comma-separated) Inventory subdomains