Undetected vulnerable
subdomain takeover
Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.
| Affected | Fingerprints | Mode | SCAN AT | SCAN By |
|---|---|---|---|---|
| paypal-buy-staging.xapo.com |
"cname": "paypal-buy-staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "403", "title": "Access denied | paypal-buy-staging.xapo.com used Cloudflare to restrict access" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| login.xapo.com |
"cname": "login.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "403", "title": "Xapo Bank - Request Blocked" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| fiat-connector.staging.xapo.com |
"cname": "fiat-connector.staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "403", "title": "Access denied | fiat-connector.staging.xapo.com used Cloudflare to restrict access" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| api-backoffice-staging.xapo.com |
"cname": "api-backoffice-staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.138.45,104.18.137.45", "status_code": "403", "title": "Access denied | api-backoffice-staging.xapo.com used Cloudflare to restrict access" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| forms-staging.xapo.com |
"cname": "forms-staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.138.45,104.18.137.45", "status_code": "403", "title": "Xapo Bank - Request Blocked" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| bridge-connector-bc-webhook.staging.xapo.com |
"cname": "bridge-connector-bc-webhook.staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "403", "title": "Xapo Bank - Request Blocked" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| mobile-module-public-api.staging.xapo.com |
"cname": "mobile-module-public-api.staging.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "404", "title": "404 Not Found" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| gps-connector-api.ztna.workload-stg.xapo.com |
"cname": "gps-connector-api.ztna.workload-stg.xapo.com.cdn.cloudflare.net", "a_records": "104.18.138.45,104.18.137.45", "status_code": "302", "title": "Sign in ã» Cloudflare Access" "redirect": "https://xapo.cloudflareaccess...." |
public | 1 year ago | Subdosec.1337 |
| paypal-buy.xapo.com |
"cname": "paypal-buy.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "403", "title": "Access denied | paypal-buy.xapo.com used Cloudflare to restrict access" "redirect": "No redirects" |
public | 1 year ago | Subdosec.1337 |
| member-transaction-engine-api.ztna.workload-stg.xapo.com |
"cname": "member-transaction-engine-api.ztna.workload-stg.xapo.com.cdn.cloudflare.net", "a_records": "104.18.137.45,104.18.138.45", "status_code": "302", "title": "Sign in ã» Cloudflare Access" "redirect": "https://xapo.cloudflareaccess...." |
public | 1 year ago | Subdosec.1337 |