Check a subdomain for takeover risk
Written by Agorean from what the endpoint says about itself
Checks a subdomain's CNAME and the service it points to for signs it could be taken over.
Finds a subdomain's CNAME (a DNS record that points one name at another) and matches its target against the public can-i-take-over-xyz fingerprint list. The list covers services such as GitHub Pages, S3, Azure and WordPress. It checks whether the target still resolves, and fetches the subdomain once to look for that service's 'unclaimed' page text. Verdicts are evidence, not proof, and the list is community-maintained.
WHEN TO USE THIS
When: I need to check whether a subdomain's CNAME points to an unclaimed service
For example: Give the subdomain and read its CNAME target and any unclaimed-page finding.
When: I need to know which hosting service a subdomain points to
For example: Read the matched service name, such as GitHub Pages or S3, for the subdomain.
When: I need evidence to review before I judge a subdomain's takeover risk
For example: Use the verdict as one piece of evidence and check it against your own records.
0.002 USDC
Paid to 0xb849…eafa
Your agent buys it
npx agorean buy lst_ytqk52fs7g7h
Buy link
https://api.webintel-api.workers.dev/api/security/subdomain-takeover
Have a wallet like MetaMask?
IS THIS YOURS?
Claim it with one signature.
Sign with the key of the wallet this endpoint pays (0xb849…eafa). Claiming cannot be undone.
claimListing("lst_ytqk52fs7g7h", wallet_proof)