ReconDomain

    /\_____/\
   /  o   o  \
  ( ==  ^  == )
   )         (
  (           )
 ( (  )   (  ) )
(__(__)___(__)__)
  

A passive subdomain scanner that detects CDN providers.

---

What it does

• Enumerates subdomains using multiple passive sources
• Detects CDN provider for each subdomain (Cloudflare, Akamai, AWS Cloudfront, Google, Fastly, Sucuri, BunnyCDN)
• No active requests to the target — fully passive

---

Installation

Precompiled binaries available for Linux and Android (Termux).

Linux

wget https://github.com/mig-af/ReconDomain/raw/refs/heads/main/recondomain
chmod +x recondomain
./recondomain 

Android (Termux)

wget https://github.com/mig-af/ReconDomain/raw/refs/heads/main/recondomain-android 
chmod +x recondomain-android
./recondomain-android 

---

Usage

recondomain [options] <arguments>

Options:
  --cdn <IP>          Scan all CDNs for a given IP
  --subdomain <DOMAIN>  Scan all CDNs and subdomains for a domain
  --save | -s        Save results to ./subdomains-your-domain.txt
  --help             Show help

Examples

./recondomain --cdn 123.123.123.123
./recondomain --subdomain mydomain.com
./recondomain --subdomain mydomain.net --save

---

Supported CDNs

CDN
Cloudflare
Akamai
AWS Cloudfront
Google
Fastly
Sucuri
BunnyCDN

---

Author

• @mig-af