MSRXTools / Websites
Subdomain finder & takeover check
Find every subdomain in public certificate logs and flag DNS records that point at deleted cloud resources, which anyone could claim.
Runs on our server
Loading tool…
Good to know
- Every TLS certificate is published in Certificate Transparency logs, so attackers can list your subdomains exactly like this.
- “Takeover risk” means a CNAME points at a name that no longer exists, such as a deleted Azure app or Heroku dyno. Remove the record or reclaim the resource.
- “Check owner” names resolve today but sit on services where takeovers have happened; confirm each bucket, app or site is still yours.
Related tools
Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.Content Security Policy evaluator
Find the gaps in a CSP: unsafe-inline, wildcards, CDN bypasses, missing object-src, base-uri and frame-ancestors.