Find subdomains with dangling CNAME records that point to services no longer in use — before attackers do.
We check 5 common subdomains (www, blog, shop, app, api) for CNAME records pointing to Heroku, GitHub Pages, Netlify, Vercel, AWS S3/CloudFront, Azure, Fastly, Shopify, and more.
A subdomain takeover occurs when a CNAME points to an unclaimed account — anyone can register it and serve content under your trusted domain name.
Want a complete security audit? Run a full site scan →