Trello: Full Sub Domain Takeover at

ID H1:174417
Type hackerone
Reporter dhaval
Modified 2017-02-02T18:18:33



The subdomain uses helpscout to host docs While helpscout does not distinguish between and (Notice trailing dot)

I created a test page and hosted it for and since DNS entry is already present now server page controlled by me

Let me know when to delete my account so that you can claim in helpscout