search

EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.75k stars 704 forks source link

dreamhost.com not vulnerable #125

Open AnotherWayIn opened 4 years ago

AnotherWayIn commented 4 years ago

So it saves someone else some $$, I signed up to Dreamhost today to attempt a domain takeover (target had: "site not found dreamhost") and received the following:

You can't add that domain: parent domain xxxxx.com is already in our system

JvdHout1011 commented 4 years ago

Sounds like something similar to Fastly, where takeover is only possible when the FQDN is not registered and some subdomain is pointing to one of their services. I would not label this 'Not vulnerable' immediately.

Perhaps it's an idea to point your subdomain to subdomain.dreamhost.com without registering the FQDN. I'm assuming then it will be possible.

yassineaboukir commented 3 years ago

Hi,

I confirmed this behavior as well. If the FQDN is already registered under another account, you'll receive the same error: You can't add that domain: parent domain xxxxx.com is already in our system.