Feature docs · Subdomain takeover
If an unused subdomain still CNAMEs to a cloud service, an attacker may claim that resource and publish content under your brand. Guardbee looks for dangling CNAME / claimable hosting signals.
Business impact
Phishing, fake support pages, and cookie-theft scenarios become legitimate under your domain. Customers see your subdomain — not a lookalike.
What to do
- Delete unused DNS records
- Clean DNS before decommissioning hosting
- Catch regressions with recurring scans
Run these checks with Guardbee
Add your brand, pick the modules that matter, and get findings in business language. Start with a 14-day free trial.
Frequently asked questions
Does it scan every subdomain?
It focuses on discovered / known DNS surface for the brand — not internet-wide search.
Can there be false positives?
Signals are heuristic; verify DNS and hosting ownership.
Related DNS guide?
Yes — see DNS and email security.