FALKEN'S MAZE / CHECKS / SUBDOMAIN TAKEOVER

Subdomain takeover

Pro (Watchtower) Subdomains

What Joshua checks

Detects CNAMEs pointing at deprovisioned cloud services.

Why it matters

A dangling CNAME lets an attacker serve content on your domain.

How to fix it

Delete the CNAME record or reclaim the service it points to.

In the Maze Score

Worth
15 points (half for a warning)
Severity
Critical
Runs on
Pro (Watchtower) and above

Related checks

How does your domain do? Scan it free and get a Maze Score in about a minute.