Stranger IP
Is a stranger answering for your hostname?
When you release a cloud IP but leave the DNS record pointing at it, the next tenant who rents that IP serves your name. We gather your hostnames from Certificate Transparency, resolve each one, and ask every IP which certificate it serves.
How to read this
Yours: the IP served a certificate that names this host.
Stranger: the IP answered, but its certificate names someone else (or nobody). If that IP is in a cloud range, check whether you still own it.
Silent: nothing answered TLS on port 443. That can be harmless (no HTTPS service) — we can't tell who holds the IP.
Dangling CNAME: the alias target resolves to nothing, so whoever registers it can serve your name.
Background: Borgolte et al., “Cloud Strife” (NDSS 2018); Liu, Hao & Wang, “All Your DNS Records Point to Us” (CCS 2016).