subjack confusing noerror with nxdomain?

[marcelo321]

Hello, i added some services to the fingerprints file. i tried to copy-paste so i didn't ruin anything.

In the services i added i put nxdomain:true so it would only alert me when the cname was nxdomain. The thing is i am getting a lot of alerts of cnames with "NOERROR" instead of "NXDOMAIN" and of course are false positives.

the fingerprints.json is fine so i don't know how to fix this