What it checks
Whether a CNAME record points at a target name that no longer resolves: the usual trace of a hosted service that was removed while its DNS record stayed.
A pass means: No CNAME records point at names that no longer exist.
Possible findings
CNAME points at a name that does not exist
Severity: MediumConfidence: Medium confidenceKind: Security issue
What we found
A CNAME record points at a target name that does not resolve.
Why it matters
A dangling CNAME often means a service was removed but its DNS record was not. If the target is on a shared platform, someone else may be able to claim it and serve content on your domain (subdomain takeover).
How to fix it
Remove the CNAME record if the service is no longer used, or recreate the resource it points at. Review DNS whenever a hosted service is retired.