Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
inet.managebuilding.com "cname": "user.managebuilding.com.edgekey.net",
"a_records": "96.16.199.113",
"status_code": "301",
"title": "No title found"
"redirect": "https://inet.managebuilding.co..."
public 3 months ago Subdosec.1337
web6739.grubhub.com "cname": "www.grubhub.com",
"a_records": "199.232.37.160",
"status_code": "500",
"title": "Fastly error: unknown domain web6739.grubhub.com"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
origin-tetsuduki.bk.mufg.jp "cname": "inbound-public-alb1-995420166.ap-northeast-1.elb.amazonaws.com",
"a_records": "54.65.125.86,52.194.3.32",
"status_code": "403",
"title": "403 Forbidden"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
ashley-king-s-school2.teachable.com "cname": "gcp-proxy.teachable.cloud",
"a_records": "34.54.192.65",
"status_code": "301",
"title": "Homepage | The Realm Of Grooming"
"redirect": "https://www.doggroomingbiz.com..."
public 3 months ago Subdosec.1337
bound-2-success-acedemy.teachable.com "cname": "gcp-proxy.teachable.cloud",
"a_records": "34.54.192.65",
"status_code": "302",
"title": "Bound 2 Success Academy"
"redirect": "https://bound-2-success-acedem..."
public 3 months ago Subdosec.1337
auth-coinsquaree.teachable.com "cname": "gcp-proxy.teachable.cloud",
"a_records": "34.54.192.65",
"status_code": "404",
"title": "404 Error - Teachable"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
commoditiesasia2026.live.ft.com "cname": "whitelabel.bizzabo.com",
"a_records": "3.171.117.28,3.171.117.87,3.171.117.121,3.171.117.43",
"status_code": "404",
"title": "Bizzabo | 404 | Social Networking in conferences, meetups and events made easy with Bizzabo’s mobile networking solution"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
delfriscos.semi.cashstar.com "cname": "cashstar.map.fastly.net",
"a_records": "199.232.36.138",
"status_code": "403",
"title": "cashstar.com"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
lautomationacademy.teachable.com "cname": "gcp-proxy.teachable.cloud",
"a_records": "34.54.192.65",
"status_code": "302",
"title": "L Automation Academy"
"redirect": "https://lautomationacademy.tea..."
public 3 months ago Subdosec.1337
20170402stmccconfirmation.shutterfly.com "cname": "site2.shutterfly.com",
"a_records": "18.214.242.127,3.222.119.28,3.232.4.163",
"status_code": "301",
"title": "Shutterfly | Photo Books, Cards, Prints, Wall Art, Gifts, Wedding"
"redirect": "https://www.shutterfly.com:443..."
public 3 months ago Subdosec.1337