Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
login-staging.xapo.com "cname": "login-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
smile-backend.ztna.workload-stg.xapo.com "cname": "smile-backend.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
contact-form-webservice.xapo.com "cname": "contact-form-webservice.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
ztna-fireblocks-address-generator.staging.xapo.com "cname": "ztna-fireblocks-address-generator.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
mobile-module-public-api.xapo.com "cname": "mobile-module-public-api.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
user-module-prod-migration.xapo.com "cname": "user-module-prod-migration.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
webhooks.xapo.com "cname": "webhooks.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
contact-staging.xapo.com "cname": "contact-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
reports-staging.xapo.com "cname": "reports-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
user-module-public.staging.xapo.com "cname": "user-module-public.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337