Skip to content
RFC 10023 and the _for-sale TXT record: what it means for DNS securitySponsored byWhoisXML API
DNSAudit.io - Domain Security Scanner
Documentation

DNS Security Documentation

Comprehensive guides on our DNS security checks, issues, vulnerabilities, and best practices.

About Our ChecksScanning ProcessSecurity ScoreEmail AuthenticationEmail Transport SecurityDNS VulnerabilitiesInformation DisclosureAdvanced DNS SecurityDNSSEC & CryptographicDNS ConfigurationResolution & ConnectivityAttack Surface ThreatsThreat IntelligenceAdvanced DKIM Security

About Our Checks

DNSAudit.io is an advanced DNS threat intelligence platform that performs comprehensive security analysis combining traditional DNS scanning with modern threat detection techniques. Our platform integrates multiple threat intelligence feeds, malware pattern recognition, and AI infrastructure exposure detection to provide enterprise-grade security assessment beyond basic DNS record validation.

The Scanning Process

01
Domain Input
Enter any domain name to scan its DNS configuration with real-time analysis.
02
Comprehensive Record Analysis
The scanner performs queries for essential record types (A, AAAA, MX, TXT, NS, CNAME, SPF, DMARC, DKIM) plus 42+ uncommon record types for complete infrastructure visibility.
03
Threat Intelligence Integration
Advanced analysis using top threat intelligence sources and our own private tech to identify IP addresses and domain names associated with malicious activity.
04
Modern Security Pattern Detection
Specialized scanners detect AI infrastructure exposure (50+ patterns), TXT record malware payloads, subdomain takeovers, DNS amplification risks, DKIM key vulnerabilities, and wildcard DNS misconfigurations.
05
Advanced Vulnerability Testing
Multi-resolver DNS analysis, zone transfer attempts, DNS rebinding protection checks, IPv6 readiness assessment, and cryptographic strength validation for DNSSEC implementations.
06
Intelligent Results Compilation
Findings are classified using severity-based scoring (critical/warning/info) with actionable remediation guidance and direct links to comprehensive fix documentation.

Security Score Calculation

The security score is calculated based on the number and severity of issues found, with critical issues having a higher impact on the score than warnings. A perfect score of 100 indicates no security issues were detected across all scanned record types.

DNS Security Issues and Solutions

A comprehensive list of DNS security issues that DNSAudit.io checks for, along with links to detailed articles explaining how to fix each issue.