Subdomain Sleuther

Don't use security-by-obscurity to hide your private services.
Make sure they have appropriate authentication