Tenant CNAME target. Do not visit directly.