[ Free tool · Check ]
CNAME Lookup
Follow a CNAME chain and catch a dangling target before someone else does.
[ About this tool ]
This CNAME lookup follows the full alias chain and flags dangling targets that an attacker could claim for subdomain takeover.
How to read the results
- ›A chain ending in NXDOMAIN is dangling.
- ›Remove CNAMEs for services you no longer use.
Frequently asked questions
What is subdomain takeover?
When a CNAME points to a deleted cloud resource, anyone can re-create it and serve content or send mail from your subdomain.
Learn more in our guide: Email Security: Stop Spoofing, Phishing and BEC
[ Get this fixed for me ]
Free expert review of your result
Our team reviews this result and sends you the exact fixes, at no cost.
[ More tools ]
Full Domain Health Scan
Run every email security check at once and get one score.
Lookalike Domain Finder
Find typo and homoglyph domains that could impersonate you.
DMARC Checker
Look up and explain any domain's live DMARC record.
SPF Checker
Validate your SPF record and check the 10-lookup limit.
DKIM Lookup
Verify a DKIM selector is published and the key is valid.
DMARC Generator
Build a valid _dmarc TXT record with guided options.