Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
prato-murphy-backend.ztna.workload-stg.xapo.com "cname": "prato-murphy-backend.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
apiwrapper.accounts.staging.xapo.com "cname": "apiwrapper.accounts.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
sgx2.staging.xapo.com "cname": "sgx2.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
trial.staging.xapo.com "cname": "trial.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
staging.nash.xapo.com "cname": "",
"a_records": "104.16.23.45,104.16.24.45",
"status_code": "530",
"title": "Origin DNS error | staging.nash.xapo.com | Cloudflare"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
cards.xapo.com "cname": "cards.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
mobile-module-internal-api.ztna.workload-stg.xapo.com "cname": "mobile-module-internal-api.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
kustomer-webhooks-staging.xapo.com "cname": "kustomer-webhooks-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
madiba-web-web.ztna.workload-prod.xapo.com "cname": "madiba-web-web.ztna.workload-prod.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
application.staging.xapo.com "cname": "application.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337