snag.page

Every check ยท DNS

Subdomain takeover

dns/takeover

What it checks

Whether the host's CNAME points at a name that doesn't exist, or at a GitHub Pages, Heroku, S3, Azure, Netlify or similar name no one has claimed.

Why it matters

Whoever claims that name on the service serves their own site at this address, with its cookies and its reputation.

How to fix it

  1. Remove the CNAME record, or point it at something you still run.
  2. Or claim the name again on the service, so no one else can.

Check a site for this and everything else: snag.page. More on dns: Private addresses IPv6 DNSSEC CAA Domain expiry Transfer lock Subdomain takeover