Subdomain Takeover Checker

Paste hostnames — ideally straight from an attack-surface scan — and this checks each for dangling DNS pointing at an unclaimed service you could take over.

Only check hosts you are authorised to assess. A “vulnerable” verdict is a strong signal, not proof — confirm before reporting.