3 ms·
Hardly "all subdomains". Unless it's doing an AXFR of my zone file (unlikely), this isn't possible. It's a scraper/guesser, using cert transparency, common nam
by TheHappyOddish 3y ago
Hardly "all subdomains". Unless it's doing an AXFR of my zone file (unlikely), this isn't possible.
It's a scraper/guesser, using cert transparency, common names, etc. Cute toy, but false claims.
- panki27 3y agoYou are correct, I've tested it with my own domains. It does not know the ones running with a wildcard certificate for example.
- wlonkly 3y agoIt knows many of the wildcard-served customer subdomains of one of my former employers. (They're probably just scraped from search or something, but a wildcard is not sufficient to prevent discovery.)