Contents
According to some SEO experts, another benefit is that subdomains can help build niche authority. For instance, you might want your blog to be considered a separate entity from your product or service.
Why should I use subdomain?
Subdomains will improve your search ranking and website traffic significantly. Search engines recognize subdomains as completely separate web addresses from your root domain. Having another domain with different content can also help you build backlinks for your main site.
Can a attacker take control of a subdomain?
However, attackers don’t need such a strong foothold in your system to cause harm. In some cases, a dangling CNAME record on one of your subdomains is all they need to take control of some (or all) of the content served by the subdomain in question. Such a security issue is known as a subdomain takeover. In this post, I will do the following:
When does a subdomain take over a host?
Typically, this happens when the subdomain has a canonical name ( CNAME) in the Domain Name System ( DNS ), but no host is providing content for it. This can happen because either a virtual host hasn’t been published yet or a virtual host has been removed.
How is a subdomain vulnerable to a takeover?
Another obvious way to exploit a subdomain vulnerable to takeover is phishing. Most phishing sites masquerading as a legitimate site (e.g., payments.example.org ) usually do not survive close scrutiny of the browser’s address bar because phishers typically have no other option than to host them on a lookalike domain (e.g., payments.exarnple.org ).
Why is a dangling CNAME record a subdomain takeover?
In some cases, a dangling CNAME record on one of your subdomains is all they need to take control of some (or all) of the content served by the subdomain in question. Such a security issue is known as a subdomain takeover. In this post, I will do the following: explain why this type of security issue should be on your radar,