HIGH SEVERITYHOSTINGID: pantheon

Pantheon Hosting Dangling DNS Takeover Fingerprint

A WordPress or Drupal environment on Pantheon was deleted while DNS remains pointed. Attackers can claim the site slug.

Target CNAME Pattern

*.pantheonsite.io

Expected HTTP Status

404 Not Found

Vulnerable Body Signature String

“404 Unknown Site”

When SubdomainWatch scanner receives HTTP responses matching this token on a dangling CNAME, it raises a critical alert immediately.

Remediation Guide & Mitigation

Action Required: Remove the CNAME pointing to Pantheon or re-associate the custom domain.

Audit authoritative DNS zone records for any CNAME records pointing to *.pantheonsite.io.
Verify whether the corresponding target resource is still active in your cloud tenant.
If the service was deprecated, delete the DNS record immediately to prevent hijackers from claiming the endpoint.
Add automated continuous monitoring to alert before third parties can register matching resource names.

SubdomainWatch continuously monitors your DNS zones for orphaned Pantheon Hosting pointers, expired certificates, and dangling records 24/7.