Take it like a gift
Can I Take Over DNS?
A list of DNS providers and how to claim (sub)domains via missing hosted zones.
Burp-AnonymousCloud
Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.