I will audit your domain for subdomain takeover

Italy

I speak Italian

sicurezza

Security researcher and bug bounty hunter active on Intigriti, HackerOne and YesWeHack. I run automated recon pipelines that map attack surfaces — subdomains, DNS misconfigurations, exposed secrets, a...
About this Gig

Your domain DNS records can point to dead cloud resources, and anyone can claim them. This is a subdomain takeover: an attacker serves content under YOUR trusted domain name. I hunt these on bug bounty platforms - now I offer the same automated recon as an audit service.


WHAT I CHECK - 100% passive, zero intrusion:

- Dangling CNAMEs across AWS, Azure, CloudFront, Unbounce, Heroku and 15+ providers

- Unclaimed service fingerprints

- Exposed sensitive files (.git, .env, backups)

- DNS misconfigurations and NS delegation risks

- Secrets and API keys in public code


DELIVERABLE: clean PDF report - every finding with evidence, severity and exact fix steps.


You must own the domain or have written authorization.


Cloud provider:

Amazon Web Services

Expertise:

Other

Related tags