Security Research — Vulnerability Disclosure

Subdomain taken over by Scriptkiddie

This page is served from a researcher-controlled Firebase Hosting project on the domain agent.cdcare.app. The subdomain's DNS A record pointed to Firebase Hosting infrastructure but no CDcare project had claimed it — allowing full takeover by Scriptkiddie.

Vulnerable Subdomain

agent.cdcare.app

Also Affected

www.agent.cdcare.app

DNS A Record Points To

199.36.158.100 (Firebase Hosting)

Root Cause

Firebase Hosting custom domain not configured in any project

Discovered By

Scriptkiddie

Discovery Date

Potential Attacker Impact (not demonstrated here)

Serve a convincing CDcare agent login page to steal agent credentials
Host malware downloads under the trusted cdcare.app domain
Conduct phishing campaigns with legitimate CDcare branding
Intercept traffic if agents have bookmarked this URL