Skip to content

AzDanglingDomain PowerShell module script reported false positive for active and valid Azure resource! #560

Open

Description

@ketan220992

AzDanglingDomain PowerShell module script output reported a DNS record as a potential dangling domain and possible subdomain takeover risk. Following detailed validation, the associated cloud resource, DNS configuration, and custom domain mapping were confirmed to be active and functioning as intended.

The investigation determined that no takeover condition existed and the finding was a false positive. The issue appears to stem from the detection logic incorrectly identifying a valid resource configuration as vulnerable.

This resulted in unnecessary investigation and validation efforts, and improvements to the detection methodology may help reduce similar false-positive alerts in future scans.

Activity

  1. github-actions commented on Sep 17, 2026

    @github-actions

    Message that will be displayed on users' first issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions