A Forgotten DNS Record and a Stranger's Website

promo.contoso.com is a CNAME to contoso-promo.azurewebsites.net, but the App Service was deleted months ago. Attackers could create a new app with that name and serve content under your domain, including capturing cookies scoped to the parent domain.