Interesting. Our domain has some subdomains with a numeric suffix; and the API response here has entries in that pattern for not only the particular subdomains that exist or ever existed, but also for subdomains of the same pattern that go beyond any suffix number we've ever actually used.

You'd think they'd at least be filtering their response by checking which subdomains actually have an A/AAAA/CNAME record on them...