Subdomain Takeover due to ████████ NS records at us-east4.37signals.com

How it was found

Description

Hi! I have discovered that us-east4.37signals.com was pointing to an unclaimed ████ NS zone and I've managed to claim it in my account.

##POC

http://nagli.us-east4.37signals.com/takeover.html

{F1451587}

Remediation

Make sure to configure the DNS records under us-east4.37signals.com

Best regards, @ nagli

Impact

Subdomain takeovers can be used for Account takeovers (cookies set to .█████████ will be shared with this subdomain and can be obtained) Stored XSS (arbitrary javascript code can be executed in a users browser) Phishing Hosting malicious content

Since you cannot control the content hosted on the site, your brand is at risk of being damaged. Additionally, the vulnerabilities in these sites, such as XSS, RCE, etc could put your sites/users at risk of attack, since they would occur on your domain.