3 ms·
If they have a webserver running https you could also check its cert for the 'Certificate Subject Alt Name' for some of its subdomains.
by blacksmith_tb 8y ago
If they have a webserver running https you could also check its cert for the 'Certificate Subject Alt Name' for some of its subdomains.