Verify · Subdomains

Subdomains

Passive discovery of live hosts using a wordlist (~50 prefixes) and names from Certificate Transparency (crt.sh), with A/AAAA/CNAME resolution, classification by category and an assessment of the attack surface.

I confirm I have explicit authorisation to analyse this domain.

wordlist + crt.sh · risk classification · ~10–45 s · requires a (free) account