Skip to main content

[Eco Bounty] “Subscribe” Button Redirects to Different Domain

New Issue


Target: https://iotexscan.io
Feature: Subscribe Button (Footer Section)
Category: Functional / UX / Link Misconfiguration
Severity: Medium

Summary

The “Subscribe” button on IoTeXScan redirects users to a completely different domain (https://iotex.io/#subscribe) instead of handling subscription directly within iotexscan.io.
This unexpected navigation may confuse users and breaks UX consistency between IoTeX platforms.

Steps to Reproduce

  1. Go to https://iotexscan.io.

  2. Scroll to the bottom section of the page.

  3. Click the “Subscribe” button.

Expected Result

Clicking “Subscribe” should either:

  • Open an in-page subscription form, or

  • Stay within the iotexscan.io domain to handle the action internally.

Actual Result

The button redirects to another site:

https://iotex.io/#subscribe
This behavior breaks continuity and could be perceived as a potential phishing or misconfiguration issue.

Impact

  • Users might lose trust due to an unexpected domain change.

  • Breaks user flow and may result in lower subscription conversion.

  • Security scanners or bug bounty reviewers might flag cross-domain redirection as unsafe if not documented.

Proof of Concept

URL: https://iotexscan.io
Redirects to: https://iotex.io/#subscribe

Wallet Address: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren

Device & Environment:

-Operating system: Windows 11 Pro

-Device model: A520MHP

Posted by cryptotestnet ·
Status: Completed1 comment

Log in to comment and vote

Comments1

  • Terry Xu

    Team•

    Oct 31, 2025

    Thanks for your feedback. After evaluation, this setup is fine. The subscription button on IoTeXScan directs users to the IoTeX website intentionally, to maintain brand consistency.