# Subdomain Wordlist - recon-dominator by orizon.one
# Top subdomain prefixes for DNS brute-force
www
mail
remote
blog
webmail
server
ns1
ns2
smtp
secure
vpn
m
shop
ftp
mail2
test
portal
ns
ww1
host
support
dev
web
bbs
ww42
mx
email
cloud
1
mail1
2
forum
owa
www2
gw
admin
store
mx1
cdn
api
exchange
app
gov
2tty
vps
govyty
hgfgdf
news
1702
mx2
crap
lb
staging
internal
intranet
stg
stage
qa
uat
pre
preprod
sandbox
demo
alpha
beta
canary
prod
production
live
www1
www3
mobile
gateway
proxy
img
images
static
assets
media
cdn1
cdn2
video
stream
download
upload
files
docs
doc
wiki
help
helpdesk
support
status
monitor
monitoring
grafana
kibana
prometheus
nagios
zabbix
sentry
log
logs
elastic
elasticsearch
search
solr
api-v1
api-v2
api-v3
api-dev
api-staging
api-internal
graphql
rest
ws
websocket
socket
realtime
auth
sso
login
id
identity
oauth
accounts
account
signup
register
git
gitlab
github
bitbucket
svn
hg
repo
ci
cd
jenkins
bamboo
travis
circleci
deploy
build
release
artifactory
nexus
registry
docker
container
k8s
kube
kubernetes
consul
vault
etcd
nomad
terraform
ansible
puppet
chef
db
database
mysql
postgres
postgresql
mongo
mongodb
redis
memcached
cassandra
couchdb
influxdb
mariadb
mssql
oracle
sql
backup
backups
bak
old
new
temp
tmp
dev1
dev2
dev3
test1
test2
test3
stage1
stage2
uat1
uat2
legacy
archive
vpn1
vpn2
openvpn
wireguard
ipsec
ssl
rdp
ssh
bastion
jump
relay
dmz
firewall
waf
proxy1
proxy2
cache
varnish
nginx
apache
iis
tomcat
jboss
weblogic
websphere
glassfish
cms
wordpress
wp
drupal
joomla
magento
shopify
woocommerce
erp
crm
salesforce
hubspot
jira
confluence
bitbucket
trello
slack
teams
zoom
meet
webex
calendar
drive
storage
s3
gcs
blob
bucket
queue
mq
rabbitmq
kafka
activemq
sqs
sns
lambda
function
edge
cf
cloudfront
akamai
fastly
payment
pay
checkout
billing
invoice
stripe
paypal
analytics
tracking
pixel
tag
ads
adserver
marketing
campaign
newsletter
smtp2
imap
pop
pop3
autodiscover
autoconfig
mta
relay2
spam
antispam
