Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
oauth-module-webservice.staging.xapo.com "cname": "oauth-module-webservice.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
fabio-test1.ztna.staging.xapo.com "cname": "fabio-test1.ztna.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "403 Forbidden"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
ssh-build-machine-apps-team.staging.xapo.com "cname": "ssh-build-machine-apps-team.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
member-transaction-engine.prod.xapo.com "cname": "member-transaction-engine.prod.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
sgx1.prod.xapo.com "cname": "sgx1.prod.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
mockconn-buy-staging.xapo.com "cname": "mockconn-buy-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
app.xapo.com "cname": "app.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
xapo.com "cname": "",
"a_records": "104.16.197.87",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
buy-module-api.ztna.workload-stg.xapo.com "cname": "buy-module-api.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
sumsub-webhook.staging.xapo.com "cname": "compliance-webhooks-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337