Feature docs · Subdomain takeover
If an unused subdomain still CNAMEs to a cloud service, an attacker may claim that resource and publish content under your brand. Guardbee looks for dangling CNAME / claimable hosting signals.
Business impact
Phishing, fake support pages, and cookie-theft scenarios become legitimate under your domain. Customers see your subdomain — not a lookalike.
What to do
- Delete unused DNS records
- Clean DNS before decommissioning hosting
- Catch regressions with recurring scans
Run these checks with Guardbee
Add your brand, pick the modules that matter, and get findings in business language. New accounts get 25 credits.
Frequently asked questions
Does it scan every subdomain?
It focuses on discovered / known DNS surface for the brand — not internet-wide search.
Can there be false positives?
Signals are heuristic; verify DNS and hosting ownership.
Related DNS guide?
Yes — see DNS and email security.