A legacy CDN domain has been re-registered and now has wildcard DNS covering `*.wpengine.netdna-ssl.com`. `netdna-ssl.com` was part of the old MaxCDN/WP Engine infrastructure, and thousands of legacy references still exist. The current TLS configuration prevents the deeper hostnames from serving content, but a valid wildcard certificate could turn this into a serious supply-chain risk. Full analysis: https://thecybersecguru.com/news/netdna-ssl-com-takeover-supply-chain-risk/