Domain admin unknown

[Trond Hønsi]

We recently discovered a domain appfarm.atlassian.net that seems to be connected to our company, but there is no record of this domain or who the dashboard's admin is. I am trying to get to the bottom of this as to who the admin is or if it is connected to our company at all.

[Sunny Ape]

Hello @Trond Hønsi 

What is the reason you've come to think that the domain name appfarm.atlassian.net is 'connected' with your company? Connected in what way?

If your Atlassian Org Admin has checked all the domains owned by your company, and that domain isn't among them, then you need to considered the simpler answer... that it has nothing to do with your company at all, that's why you don't know who the admin is and you can't access it.

If you're sending access requests and getting no response, it's just as likely because the owner has no idea who you are or why you're asking for access, so they're ignoring you... or maybe they're just on holiday.

Google "Can I ask Atlassian who owns a *.atlassian.net domain?" for a more detailed break-down of who 'owns' any particular *.atlassian.net domain name and how your organisation can claim control if they can prove it should be theirs.

[Trond Hønsi]

Well, that is something I have thought about, but then I would also like to know that.

We first learned about the domain through our Responsible Disclosure Policy because it allows public access requests, and thus, it is already affecting our reputation.

As a security professional, I do not like loose ends. So, if this is not connected to our company, I would like to know. If it is legacy, I would like it taken down. I would also like information about whom to contact if it is connected to our organization.

I have tried to explore other channels to request information, but currently, the community is the only channel to reach out to Atlassian, so here I am.

[Trond Hønsi]

And if you check point 4 after trying to Google what you are suggesting, "contact Atlassian support", that is the step I am trying at the moment.

[Nikola Perisic]

Welcome @Trond Hønsi 

Are you on premium so you can check the audit log for that domain. Within your activities you have a filter for domain related activities.

[Trond Hønsi]

Hi Nikola, we have 0 access to the domain what so ever, and are currently not paying anything for the Jira-services. I have tried to "request access" to the team without any luck.

[Nikola Perisic]

I believe there is someone from that team that you can talk to? I cannot really help you to give you more insights rather the one with the audit log. You don't need to access it, you can look for all logs that are associated with the domain. One thing to mention, the URL you provided is the site, is their domain appfarm as well?

[Trond Hønsi]

There is no known member of that team in our organization, so there is no one to talk to. I hope someone from Atlasian will be able to help here. All we know is that the domain exists and is active.

[Nikola Perisic]

If you are not familiar with that domain,but still you have access to Atlassian administration, you can remove it.