This subdomain was successfully claimed through a Subdomain Takeover vulnerability. This page serves as a proof of control and was deployed solely for responsible security disclosure purposes.
A Subdomain Takeover occurs when a DNS record references a cloud or third-party service that is no longer claimed, configured, or maintained.
If that resource becomes available again, an attacker may be able to register it and gain control over the associated subdomain without compromising any internal infrastructure.
Delete DNS entries that point to services as soon as they are no longer in use.
Verify ownership of all referenced cloud and SaaS resources.
Keep an accurate inventory of active subdomains and dependencies.
Perform automated checks for abandoned resources and dangling DNS records.
Technical analysis of takeover scenarios involving cloud platforms, misconfigured DNS records, and abandoned infrastructure resources.
Read →Detailed explanation of takeover scenarios, validation, exploitation considerations, and remediation guidance by the author of "Can I take over XYZ".
Read →This cheat sheet provides practical guidance for developers, DevOps engineers, and infrastructure teams to prevent subdomain takeovers.
Read →Technical overview covering DNS behavior, common pitfalls, and the underlying mechanics enabling takeovers by someone who has masterized it.
Read →Analysis of takeover: scenarios, impacts, exploitation, how bad is a subdomain attack, recommandations and good practices to prevent it.
Read →Research by Patrik Hudak covering practical detection techniques, DNS validation pitfalls, and real-world takeover identification strategies.
Read →Independent security researcher specializing in web application security, cloud security, attack surface assessment, and responsible vulnerability disclosure.
This proof of concept was created to help identify and remediate security weaknesses before they can be discovered and abused by malicious actors.
If you are responsible for this domain and would like to recover control of this subdomain, obtain additional technical details, or discuss remediation, please contact me through the website below.
Website: https://glc.st