HexBrain

Omise · Report #1963213

Subdomain takeover http://accessday.opn.ooo/

Validstatus
mediumseverity
$50bounty
74upvotes
11 Jun 2023disclosed

How it was found

I found unused accessday.opn.ooo subdomain was delegated to wix.com and not claimed.

Steps To Reproduce:

Similar report:

https://hackerone.com/reports/1256389 https://hackerone.com/reports/996956 https://hackerone.com/reports/1183296

Impact

An attacker can claim this subdomain and abused for specific purposes

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original