wrong url in hackerone > goes to wix.com > unconnected
Low
S
Sifchain
Submitted None
Actions:
Reported by
mhohlfeld
Vulnerability Details
Technical details and impact analysis
## Summary:
Hi there, this is a very small issue out of scope.
Your current domain name in your hackerone program is wrong: http://sifchain.finance and moves to wix.com
## Steps To Reproduce:
1. Login as a researcher
2. Open the program from sifchain: https://hackerone.com/sifchain?type=team
3. click on the public url: http://sifchain.finance
4. you will be redirected to wix.com and see message "not connected"
## Supporting Material/References:
* screen movie: F1291486
## Impact
I think there is no impact.
**But maybe** (Maybe - because i don't know how wix.com works):
An attacker can create a new website and give his wix-project the name "sifchain.finance" *or* can connect an external domain "sifchain.finance".
The attacker can create a copy/paste fake website.
Than all researchers who click here on hackerone.com on the link will come to a fake website.
The attacker maybe can steal sifchain login data from the researchers.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Misconfiguration