snag.page

Every check ยท DNS

Subdomain takeover

dns/subdomains

What it checks

Up to 25 subdomains named in Certificate Transparency logs: whether any has a CNAME to a name that no longer exists, or to a service that says no one has claimed it.

Why it matters

Whoever claims the name serves their own pages on your domain, where they can set its cookies and phish your visitors.

How to fix it

  1. Remove each CNAME record that points at something you no longer run.
  2. Or claim the name again on the service, so no one else can.

Check a site for this and everything else: snag.page. More on dns: Private addresses IPv6 DNSSEC CAA Domain expiry Transfer lock Subdomain takeover