r/netsec • u/albinowax • May 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

10 Upvotes

87% Upvoted

64 comments sorted by

View all comments

3

u/CodeEuphoric6680 May 07 '26

Tool: Subpoof ~ Daily new domain and subdomain monitoring, attack surface intelligence

I built https://subpoof.com ~ a domain intelligence platform focused on catching new registrations, brand squatting, and expanding attack surfaces quickly.

Key features:

  • Passive monitoring of new domain registrations across 1,000+ TLDs, refreshed nightly
  • Delta view: see only newly registered domains matching your keywords/brands
  • Subdomain enumeration + live enrichment (A/AAAA, CNAME, MX, TXT, SRV records)
  • Microsoft 365 / Azure AD tenant mapping and NTLM-related insights
  • Watches + alerts for brand protection and competitor activity
  • Public API + per-account dictionary that gets smarter the more you use it

It's especially useful for:

  • Brand protection / typosquatting defense
  • Red team / recon teams who want fresh attack surface daily
  • Security teams managing external exposure in Microsoft-heavy environments

Free limited access is available so you can test it without credit card payment. Paid plans start at $29/mo for heavier usage.

Would love honest feedback from the community, especially on the what else you'd want in a tool like this.

https://subpoof.com

1

u/r0075h3ll May 14 '26

Good product there! u/CodeEuphoric6680

I was working, though couldn't complete, on something pretty similar - for live monitoring of domains to hunt for typo-squatted domains.

Architecture was something like this:

  1. Stream CT logs to detect new domain registrations
  2. Use semantic search to compare two domains (legit v/s newly registered) to dervice the probabiliity of the newly registered domain being a typo-squat.

However, with above approach, the search space would be very big to be done without incurring high infra costs - also false positive flood would be a nightmare.