Security vulnerability: subdomain takeover of api.minecraft.net
I noticed that subdomain takeover of api.minecraft.net is possible. DNS records api.minecraft.net is a CNAME to MS Azure Public IP resource, but the referenced address (midgard-prod-agw-istio.eastus2.cloudapp.azure.com) is not anymore reserved.
Therefore anyone could reserve it and serve content under minecraft.net-domain. Abuser could use this vulnerability for sending spam, phishing etc.
I reserved the address (midgard-prod-agw-istio.eastus2.cloudapp.azure.com) to (temporarily) remove the vulnerability. I reserved the address but I have not set any services behind it, so there is no website or anything.
Please remove the CNAME or change it to correct address.
If you want me to release the address, just tell me.