For a subdomain
For a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still resolves, and fetches the subdomain once to look for the service's 'unclaimed' page text. Verdicts are evidence, not proof; the list is community-maintained.
Answeringour last check, 2026-10-24
1 of 1checks answered this week
28 msmedian answer time
$0.002listed price per call
$0.002price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
GET https://api.webintel-api.workers.dev/api/security/subdomain-takeover
| Category | Everything else |
|---|---|
| Provider host | api.webintel-api.workers.dev |
| Networks | eip155:5042, eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp, xrpl:0 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 1 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-24 | valid payment request | 402 | $0.002 | 28 ms |
Example input (from the provider)
{
"method": "GET",
"queryParams": {
"subdomain": "staging.wordpress.com"
},
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"subdomain": {
"description": "Host name to check, e.g. staging.wordpress.com (required)",
"type": "string"
}
},
"required": [
"subdomain"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}