EdOverflow/can-i-take-over-xyz

Akamai CDN irregular responses !

Open

#42 opened on Sep 18, 2018

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Python (4,216 stars) (670 forks)batch import
help wanted

Description

I found some subdomains that look like this: Server: edgesuite and akadns (Akamai) I found some different 404 responses for those subdomains look like : 1>File not found."

2>Service Unavailable - DNS failure The server is temporarily unable to service your request. Please try again later.

3>An error occurred while processing your request.

This is what I getting from that Akamai CDN service which is different from the last one

Invalid URL The requested URL "[no URL]", is invalid.

Does anyone know if this vulnerable to a takeover?

Contributor guide

Tech stack
None
Domain
security
Issue type
research
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
Basic understanding of DNSHTTP response codes
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
Investigate whether the described Akamai CDN responses indicate a potential subdomain takeover vulnerability. Check the repository's existing fingerprints for Akamai services and compare the provided error messages (e.g., 'File not found.', 'Service Unavailable DNS failure', 'Invalid URL') against known Akamai behavior. Look for any documented Akamai takeover conditions in the project's 'fingerprints/' directory or issues/PRs. Since there is no maintainer response, the answer may require testing with a registered domain and verifying DNS configuration. Provide a clear conclusion and suggest adding a fingerprint if applicable.