A CNAME target still needs to be resolved

An alias is a relationship between names, not the final address or a browser redirect.

Read the relationship first

CNAME says the queried name is an alias for another name. The target may belong to a CDN, hosting platform or one of your own subdomains. When checking further, distinguish answers owned by the original name from answers owned by the target.

Review retired service bindings

An old CNAME can remain after a hosted service is discontinued. Check dependencies before removing it, or confirm the target remains controlled by the expected account if it is kept. One broken target alone is not a complete security assessment.

Do not confuse aliases with redirects

DNS aliases support resolution; they do not change the address shown in a browser. To consolidate website entry points, also configure HTTP redirects and check that certificates cover all names visitors use.

This guide explains public DNS responses. Before changing production settings, check the documentation for your current domain and hosting providers.