subdomain takeover at odoo-staging.exness.io

How it was found

Domain:

https://odoo-staging.exness.io

PoC

https://odoo-staging.exness.io

Cname:

$ host odoo-staging.exness.io
odoo-staging.exness.io is an alias for exness-stg.odoo.com.
exness-stg.odoo.com has address 141.95.172.222
exness-stg.odoo.com mail is handled by 10 eu123a.odoo.com.

Impact

Scam, phishing