SubdomainTKO

Subdomain takeover scanner

Ready
100% client-side

Authorized testing only. Scan infrastructure you own or that a bug bounty program puts in scope. Claiming a third-party service on a domain you do not own is illegal.

Targets

Settings
DNS resolver

Results

Find dangling DNS before someone else does

Paste the subdomains you want to check. Each one gets a single DNS-over-HTTPS query, and its CNAME chain is compared against known takeover fingerprints.

  1. 1
    ResolveFollow the CNAME chain and read the response code.
  2. 2
    MatchCompare every hop with provider signatures.
  3. 3
    VerifyOpen the host and confirm the unclaimed-resource page.
Providers covered