Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
incode-webhook.xapo.com "cname": "compliance-webhooks.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
compliance-webhooks.xapo.com "cname": "compliance-webhooks.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
oauth-module-webservice.ztna.workload-stg.xapo.com "cname": "oauth-module-webservice.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
addressbook-module-api.ztna.workload-stg.xapo.com "cname": "addressbook-module-api.ztna.workload-stg.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
user-module-public.xapo.com "cname": "user-module-public.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
sumsub-webhook.xapo.com "cname": "compliance-webhooks.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
onfido-webhook.xapo.com "cname": "compliance-webhooks.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
apiwrapper-alpha-k8s-staging.xapo.com "cname": "apiwrapper-alpha-k8s-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
auth-webhooks-staging.xapo.com "cname": "auth-webhooks-staging.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.137.45,104.18.138.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337
tmp-webhook-lightspark.prod.xapo.com "cname": "tmp-webhook-lightspark.prod.xapo.com.cdn.cloudflare.net",
"a_records": "104.18.138.45,104.18.137.45",
"status_code": "403",
"title": "Xapo Bank - Request Blocked"
"redirect": "No redirects"
public 1 year ago Subdosec.1337