TL;DR: Beyond CNAME — orphaned NS delegations, expired domain MX records, decommissioned IP ranges reassigned to attacker.
Stub — to be filled in.
What it is
TODO
Preconditions / where it applies
TODO
Technique
TODO
Detection and defence
TODO
References