www works

www.wpvulnscan.com

Deployment placeholder. This is the www host, so the CNAME is resolving correctly.

Host
www.wpvulnscan.com
Role
www (CNAME → wpvulnscan.com)
Origin
Pip - 62.171.128.83
Served from
/var/www/www.wpvulnscan.com/
Edge
Cloudflare (proxied)

Seeing this page (rather than the apex one) confirms www is routed separately and is not falling through to another vhost.