Omise · Report #1963213
Subdomain takeover http://accessday.opn.ooo/
Validstatus
mediumseverity
$50bounty
74upvotes
11 Jun 2023disclosed
How it was found
I found unused accessday.opn.ooo subdomain was delegated to wix.com and not claimed.
Steps To Reproduce:
- Visit http://accessday.opn.ooo/
- This domain pointing towards to WIX cdn, anyone can claim this subdomain
Similar report:
https://hackerone.com/reports/1256389 https://hackerone.com/reports/996956 https://hackerone.com/reports/1183296
Impact
An attacker can claim this subdomain and abused for specific purposes