Move the CNAME to an internal name out of public DNS on Cloudflare

Why it matters

A public record points at a private-use name such as .local, .internal or .corp. Nobody can register such a name, so it is not a takeover risk, but it tells anyone who looks the name of an internal host and the record fails for every visitor outside your network.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

1. Open DNS then Records, find the CNAME named in the finding and delete it once the internal DNS server answers for the name.
2. Cloudflare's public zone cannot serve different answers inside your network, so keep internal names on the internal resolver only.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the Dangling CNAMEs check
• Delete the CNAME that points at an unregistered domain
• Remove or reclaim the CNAME to a deprovisioned service
• Delete the CNAME that points at a name that does not exist
• Fix the wildcard CNAME that points at a missing name