Instapage is still vulnerable in some cases, Edge Case change suggestion
kaiksi-bb opened this issue · comments
kaiksi-bb commented
Hi,
Instapage should be changed to Edge Case IMHO. I believe that as long as the original account that had the domain registered is deleted/suspended it is still possible to takeover.
Service name
Instapage
Proof
CNAME: secure.pageserve.co
Documentation
As explained on the Documentation, as long as the domain does not belong to an existing account the only verification is having the CNAME added:
https://help.instapage.com/hc/en-us/articles/205242898-Adding-and-managing-custom-domains
kaiksi-bb commented
need pay?
No, start free trial 14 days account.
EdOverflow commented
@kaiksi-bb, would you be willing to add this to the discussion over in #73? That helps us keep discussions ongoing.