Vercel domains are assessed for ownership verification status. Unverified domains may not serve traffic correctly and could indicate a pending or incomplete domain setup. Domain verification confirms that the domain owner has authorized Vercel to manage the domain.
Risk
Unverified domains may fail to resolve or serve content, causing downtime for users. An unverified domain could also indicate a stale or orphaned configuration, or a domain that was added but never properly transferred, creating potential for domain takeover if the ownership verification is left incomplete.
prowler vercel --checks domain_verified
Recommendation
Complete domain verification by configuring the required DNS records at your domain registrar. Remove any domains that are no longer needed to reduce the attack surface. Regularly audit domain configurations to ensure all domains remain verified.
Remediation
- Sign in to the Vercel dashboard
- Navigate to the project Settings > Domains
- For any unverified domain, follow the verification steps shown
- Add the required DNS records (CNAME or A record) at your domain registrar
- Wait for DNS propagation and verify the domain
Source Code
Resource Type
NotDefined
References
Related To
- domain_dns_properly_configured
- domain_ssl_certificate_valid