Check whether hostnames point to unclaimed resources on known cloud providers. Paste up to 10 hostnames (one per line). The backend resolves each CNAME chain, fetches the endpoint, and matches known unclaimed fingerprints.
Hostnames
Results
Checking hostnames...
Paste hostnames above to begin...
How It Works
For each hostname the tool queries the CNAME record via dig, checks if it resolves, and fetches the HTTP response. If a CNAME points to a known provider (GitHub Pages, Heroku, Netlify, S3, etc.) and the response contains an unclaimed fingerprint — or the CNAME target itself does not resolve — the hostname is flagged as vulnerable.
Only public HTTP/HTTPS endpoints are fetched. Use this tool only against systems you own or have explicit permission to test.