Subdomain takeover using https://tilda.cc/

[Akash Labade]

Service name

https://tilda.cc/

Proof

https://hackerone.com/reports/894657

Documentation

Subdomains which are pointing to tilda.cc,and has a unclaimed DNS record are vulnerable for subdomain-takeover.

Reference

https://help.tilda.ws/customdomain#:~:text=Navigate%20to%20the%20Site%20Settings,in%20the%20right%20upper%20corner.

[Philippe Delteil]

I just took over one Tilda domain.

This is the error message

[Philippe Delteil]

I found one with another error message

"Please renew your subscription". In this case is not possible to take over the subdomain.