DNS Intelligence Analyzer

DNS Intelligence Analyzer

Complete DNS infrastructure analysis for a target domain:

• Zone Transfer Attempt — Tests AXFR against all nameservers of the domain.
• DNSSEC Zone Walking — If DNSSEC is enabled with NSEC (not NSEC3), enumerates all records in the domain zone.
• DNS History — Queries SecurityTrails, PassiveTotal, and VirusTotal for historical DNS records (previous IPs, hosting changes).
• Misconfiguration Detection — Overly permissive SPF, DMARC set to none, open resolvers, wildcard DNS entries.
• Subdomain Brute Force — Massive resolution with optimized wordlist (50k entries) and wildcard detection to filter false positives.
• ASN Mapping — Maps all resolved IPs to their ASNs to identify hosting providers and network ranges.