can-i-take-over-xyz icon indicating copy to clipboard operation
can-i-take-over-xyz copied to clipboard

Published 20 hours ago • verified publisher icon EdOverflow

Instapage is still vulnerable in some cases, Edge Case change suggestion

Open kaiksi-bb opened this issue 2 years ago • 3 comments

Hi,

Instapage should be changed to Edge Case IMHO. I believe that as long as the original account that had the domain registered is deleted/suspended it is still possible to takeover.

Service name

Instapage

Proof

poc

dig

404

instapage

CNAME: secure.pageserve.co

Documentation

As explained on the Documentation, as long as the domain does not belong to an existing account the only verification is having the CNAME added:

https://help.instapage.com/hc/en-us/articles/205242898-Adding-and-managing-custom-domains

kaiksi-bb avatar Jan 16 '23 16:01 kaiksi-bb

need pay?

No, start free trial 14 days account.

kaiksi-bb avatar Jan 20 '23 10:01 kaiksi-bb

@kaiksi-bb, would you be willing to add this to the discussion over in https://github.com/EdOverflow/can-i-take-over-xyz/issues/73? That helps us keep discussions ongoing.

EdOverflow avatar Feb 15 '23 11:02 EdOverflow