An offline recon challenge, literally

1. Use certificate transparency to find subdomains.
2. Those names hint to the homepage. Can be found on the Internet Archive (Censys, etc.)
3. That's it, I changed my mind on robots.txt stuff.

I'm keeping the domains registered just in case, but everything is already logged and should stay offline.

The check script queries crt.sh and archive.org to make sure everything is still there.