Hacker News new | ask | show | jobs
by eat 470 days ago
DNS enumeration (brute force) with a good wordlist, zone transfer, or leaking the name through a certificate served when accessing your host via IP address are all possibilities.

The name "userfileupload" is far from not-obvious, so that would be my guess.