Quote:
Palo Alto Networks reports that while running its CNAME cloaking scanner for a month, it detected 43,000 cloaked subdomains in 38,000 root domains, with most of them (98%) pointing to a single external resource.
Link to the Palo Alto Networks study:
https://unit42.paloaltonetworks.com/cname-cloaking/#cname-cloaking-detections-in-action