← All Tools

🎭 Subdomain Takeover Checker

Find dangling CNAMEs an attacker could claim. Resolves the CNAME chain, matches 20+ takeover-prone services, and confirms with the service’s unclaimed-page fingerprint.

Only test hostnames you are authorized to assess. Results are heuristic — verify manually before acting.
🔒 DNS + HTTP checks run server-side via SSRF-guarded fetches — your IP is never forwarded. Nothing is stored. Rate-limited.