Undetected vulnerable
subdomain takeover

Use this to find new services to takeover.
Looking forward to your validation and contribution by sending fingerprints to github.

Github How to contribution?
Affected Fingerprints Mode SCAN AT SCAN By
stage.paze.com "cname": "stage.paze.com.cdn.cloudflare.net",
"a_records": "104.17.235.15,104.17.234.15",
"status_code": "403",
"title": "Access denied | stage.paze.com used Cloudflare to restrict access | stage.paze.com | Cloudflare"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
internal.saafin.bk.mufg.jp "cname": "",
"a_records": "18.178.218.167,13.193.95.213",
"status_code": "503",
"title": "No title found"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
bhnjapangift.us-west-2.qa.cashstar.com "cname": "clb.us-west-2.qa.cashstar.com",
"a_records": "52.43.245.224,54.200.86.175",
"status_code": "403",
"title": "cashstar.com"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
academywoods.managebuilding.com "cname": "",
"a_records": "96.16.199.113",
"status_code": "301",
"title": "Home"
"redirect": "https://academywoods.managebui..."
public 3 months ago Subdosec.1337
shareroo.customlinks.appsflyer.com "cname": "onelinkalb.customlinks.appsflyer.com.cdn.cloudflare.net",
"a_records": "162.159.140.159,172.66.0.157",
"status_code": "403",
"title": "Access Denied"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
edresourseacad.teachable.com "cname": "gcp-proxy.teachable.cloud",
"a_records": "34.54.192.65",
"status_code": "404",
"title": "404 Error - Teachable"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
homefront.geico.com "cname": "j652jxx.x.incapdns.net",
"a_records": "",
"status_code": "301",
"title": "No title found"
"redirect": "https://www.geico.com/informat..."
public 3 months ago Subdosec.1337
tmhinvestments.managebuilding.com "cname": "user.managebuilding.com.edgekey.net",
"a_records": "96.16.199.113",
"status_code": "301",
"title": ""
"redirect": "https://tmhinvestments.manageb..."
public 3 months ago Subdosec.1337
boost-insights-dbmigration.recommerce.svc.dev.dba.dk "cname": "external-https-lb-vip.dev.dba.dk",
"a_records": "34.36.243.30",
"status_code": "403",
"title": "403"
"redirect": "No redirects"
public 3 months ago Subdosec.1337
na-saas-npp.backup.ninjarmm.com "cname": "n1-na-saas-npp-tg-2141201282.us-west-2.elb.amazonaws.com",
"a_records": "54.148.170.139,54.149.10.91",
"status_code": "302",
"title": "Login"
"redirect": "https://na-saas-npp.backup.nin..."
public 3 months ago Subdosec.1337