SUBDOMAIN TAKEOVER PoC
Researcher: aaj777 (Bugcrowd)
Target: internal-platform-staging.cashstaging.app
Method: dangling Fastly CNAME claimed on attacker-controlled Fastly service
Date: 2026-07-04
Benign proof-of-concept - no malicious content.