Intertesting Find about can-i-take-over-xyz HOT 3 OPEN

@sumgro usually if it is an S3 bucket, the bucket name would be in the HTTP response, in which case you could takeover the domain by simply registering that bucket name.

I'm not sure if this is always the case though!

from can-i-take-over-xyz.

@hakluke thanks for the suggestion. I was able to discover the bucket name from the HTTP response.

Now I understand, that the S3 bucket is pointed at using the Fastly service.

One more question:
What is the best way to confirm the endpoint given by AWS is the exact match with one pointed to by fastly service.

from can-i-take-over-xyz.

@sumgro You can derive the bucket endpoint from the bucket name using the schema outlined in this doc: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingBucket.html

http://bucket.s3.aws-region.amazonaws.com.
http://bucket.s3.amazonaws.com

from can-i-take-over-xyz.