nowfound

Alternatives

Products that do what Subdomain Takeover Checker does

Detect subdomain takeover vulnerabilities for free

  1. 1FS

    Hello! I'm learning Rust and also information security, so what better way to learn than to put a tool together practicing both skills? I've tried to use a couple of different tools for subdomain enumeration (part of the Discovery-party when it comes to penetration testing), but none of them were very fast, even if the DNS resolver I pointed them towards is, so I wrote my own tool that leverages concurrency to check a lot of subdomains, fast! It's written in Rust, main parts being using Tokio and async_channels, and I think it works good enough for a first release. I wanted to get recursive…

    2022 · github.com

  2. 2IA

    IPDetective collects data from about 60+ different sources such as official cloud provider endpoints and public VPN/Proxy/Tor/Bot net lists. Then aggregates this data into a fast and easy to use API that can be integrated into applications or scripts easily. IPDetective started as a hobby project for my other hobby projects :) and I decided to wrap a simple website around and offer it as a service. Let me know what your thoughts, if you find value in this service or if you have any feature requests.

    2022 · ipdetective.io

  3. 3OT

    hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

    Jul 2026 · search.cerast-intelligence.com

  4. 4FA

    2013 · instantname.me

  5. 5

    Find your web app's vulnerabilities before attackers do

    Jul 2026 · sensagraph.com

  6. 6

    Domain availability checks for humans and AI agents.

    Jun 2026 · takenorfree.com

  7. 7

    Free website security audit grade in 10 seconds

    Mar 2026

  8. 8

    Domain infrastructure monitoring across all registrars

    Mar 2026

  9. 9DI
  10. 10

    Scan your domain. See what attackers see.

    27d ago · threatlocator.com

  11. 11
    DNSFly3

    Free DNS, SSL & Domain Toolkit

    Feb 2026

  12. 12

    Detect domain security issues before they hurt your business

    May 2026 · domainscan.tools

  13. 13ST

    I wrote a script to scan top sub-reddits and calculate the total number of malicious domains associated to the links posted.

    2024 · pangea.cloud

  14. 14

    Monitor and secure your email domains, campaigns, and client

    Jul 2026 · infraova.com

  15. 15UC

    I found out Cloudflare has a DNS over HTTPS api via 1.1.1.1 resolver, figured I'd make a small tool out of it, as somene who keeps checking domain names for side projects which I never build, this kinda helps me look for something. It's not fully accurate, because it returns unavailable even for parked pages, which technically are available, but works for me. It just checks for A records via this endpoint https://cloudflare-dns.com/dns-query?name=${domain}&type=A Just make sure to pass this header - "application/dns-json"

    2024 · supersaas.dev

  16. 16GW

    2025 · wildcard.jolly-ops.com

  17. 17IB

    I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…

    2025 · github.com

  18. 18

    Catch cold email launch blockers before you send

    Jun 2026 · outboundqa.com

  19. 19

    Stop phishing before it starts

    Aug 2026 · phishfence.io

  20. 20SE

    2024 · github.com

  21. 21

    Check MX Records for Any Domain Instantly

    Jun 2026 · cbrtool.com

  22. 22WF

    This can be used to find phishing domains or domains matching any pattern you want if you select "custom filter." You can also connect over WebSocket at /ws and use any programming language you want. There may be duplicates because some domains are published in multiple logs. I get data from all of the logs currently included with Chrome, a list of which is available here: https://github.com/google/certificate-transparency-community....

    2024 · firehose.lol

  23. 23
    Namizy4

    Free domain checker with live registry data — no upsells

    26d ago · namizy.com

  24. 24OD

    Hey HN! We built DNS Directory (https://dnsdirectory.com), a free, searchable database of public DNS servers with live monitoring every 10 minutes. We needed to find an up-to-date list of DNS servers used by carriers around the world for a proxy fingerprinting / web-scraping project but we were shocked to find that it didn’t exist so we built it ourselves in an internal Hackathon We’re adding more features but so far we: Test 77K+ servers every ~10 minutes Allow filtering by uptime, location, security features (ad blocking, malware protection, DNSSEC) Show info on IPv6…

    Dec 2025 · dnsdirectory.com

Ranked by how close each launch is in meaning, then by votes. Refine with a description →