Frontify

[robotshell]

Service name

Frontify

Proof

1. Execute the tool dig. Example dig example.com:

; <<>> DiG 9.11.5-P4-5.1-Debian <<>> example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41542
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1460
;; QUESTION SECTION:
;example.com.		IN	A

;; ANSWER SECTION:
example.com.	900	IN	CNAME	subdomain.frontify.com.
subdomain.frontify.com. 60 IN A 1.1.1.1
subdomain.frontify.com. 60 IN A 1.1.1.2
subdomain.frontify.com. 60 IN A 1.1.1.3

;; AUTHORITY SECTION:
frontify.com.		172800	IN	NS	ns-1322.awsdns-37.org.
frontify.com.		172800	IN	NS	ns-1591.awsdns-06.co.uk.
frontify.com.		172800	IN	NS	ns-446.awsdns-55.com.
frontify.com.		172800	IN	NS	ns-748.awsdns-29.net.

;; Query time: 90 msec
;; SERVER: 10.10.10.10#53(10.10.10.10)
;; WHEN: Fri Jun 28 04:29:07 EDT 2019
;; MSG SIZE  rcvd: 291

Previous ip addresses and domains have been invented to show example

2. Enter the subdomain adress in the web browser. Example subdomain.frontify.com. Check if it appears Error 404 like in the image.
   

3. Create a free account: Free Trial

4. Create one project.

5. Enter to Account Settings menu.

6. In the Your Frontify Domain field, try the subdomain that we want to take. In the case of our example, we should change company-165332.frontify.com for subdomain.frontify.com.

7. Upload any file in your project or create a guideline.
8. Test the result. https://example.com/{path of the file that we have uploaded or guideline}
   Reminder: the file must have the public view enabled

Documentation

https://help.frontify.com/en/

[0xspade]

I was able to takeover the CNAME but it's not reflecting on the subdomain I want to takeover.

[pdelteil]

I just found a case where I couldn't take the subdomain:

;; ANSWER SECTION:
example.com.	900	IN	CNAME	domains.frontify.com.
domains.frontify.com. 60 IN A 1.1.1.1
domains.frontify.com. 60 IN A 1.1.1.2
domains.frontify.com. 60 IN A 1.1.1.3

And then

[Captain0X]

Hi ,this domain can we take over?