|
You can track if they issued any SSL certs under the domain and with a bit of luck they did it from their actual origin server.
Also look at where their email is hosted, some are smart enough to leave it with the place where the rest is hosted as well.
Last check the DNS history, they might have switched to cloudflare only recently.
|