DANGLING RECORDS

Find subdomains attackers can claim.

Old CNAMEs to GitHub, S3, Netlify, and friends can point at nothing you control. Someone else can host content on your subdomain. We hunt those dangling records from cert logs + fingerprints.

Fetching subdomains from crt.sh…
HOW TO USE
  1. Type your root domain.
  2. Click Scan Domain. We pull hostnames from cert logs.
  3. Fix or delete risky CNAMEs — or claim the cloud resource so you own it again.

Provider-Specific Guides