Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
contact.xapo.com "cname": "contact.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
compliance-webhooks-staging.xapo.com "cname": "compliance-webhooks-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
doc-apps-staging-public.xapo.com "cname": "doc-apps-staging-public.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
internal-tools.ztna.staging.xapo.com "cname": "internal-tools.ztna.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
xauth-staging.xapo.com "cname": "xauth-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
bender-apiwrapper-staging.xapo.com "cname": "bender-apiwrapper-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
crypto-address-service.xapo.com "cname": "crypto-address-service.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
sgx1.staging.xapo.com "cname": "sgx1.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
merlin.xapo.com "cname": "merlin.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Error ・ Cloudflare Access"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
member-transaction-engine-api.staging.xapo.com "cname": "member-transaction-engine-api.staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337