Automatic subdomain discovery
Pull every subdomain that has appeared in public certificate transparency logs for your domain, and check them automatically — so forgotten hosts get swept even if you never knew they existed.
[ IMPROVEMENTS ]
What’s coming
next.
Danglegeddon is a scoped, read-only checker today. These are the goals that will widen what it can see — without ever claiming resources or probing your services.
In progress
Actively being built.
Larger batch scans
Queue more hostnames per scan and work through them in batches instead of hitting the current eight-name limit.
Up next
Planned for the next releases.
Wildcard detection for your zone
Recognise wildcard records in your own DNS so catch-all answers don’t hide — or fake — dangling hostnames. Provider-side wildcards are already handled.
Sub-zone delegation checks
Extend authoritative checks to delegated subdomains inside an imported zone, not just the apex.
Exploring
Ideas we’re researching.
Scheduled re-scans
Re-check a perimeter on a schedule and flag records that newly start pointing into the void.
Abandoned IP detection
Spot A/AAAA records pointing at released cloud IP ranges — a harder signal that DNS alone can’t confirm.
Shipped
Live in the scanner now.
Zone file import
Upload or paste a BIND zone export and every CNAME, MX, NS and SRV target is checked. Gated behind an authorization and data-exposure acknowledgement.
Authoritative delegation checks
Asks the registry and each nameserver directly over TCP — catching lame delegations, unresolvable nameservers, NS mismatches and stale serials.
Provider fingerprints
Recognises 40+ hosting, DNS and mail platforms from target hostnames, and won’t report a wildcard platform like GitHub Pages or Heroku as safely resolving.
Shareable reports
A printable report page with a link you can share. The report lives in the link itself — nothing is stored on our servers.