shakauy
Re:We scanned DNS TXT records for the Fortune 500 and here's what they...
on Wednesday January 21, 2026 @08:58AM (#46705784)
Indeed! Good point, TXT records pile up fast with SPF, DKIM, DMARC, and vendor checks, which increases amplification risk for resolvers, and it's the same sprawl we’re seeing as long-lived infrastructure signals from the outside!
We scanned DNS TXT records for the Fortune 500 and here's what they exposed
Re:We scanned DNS TXT records for the Fortune 500 and here's what they...
on Wednesday January 21, 2026 @07:28AM (#46704721)
DNS TXT records are usually added for email auth or vendor verification and rarely revisited. We scanned TXT records across Fortune 500 domains to see what they expose at scale, and found they consistently reveal email infrastructure, SaaS dependencies, legacy tooling, and long-lived operational artifacts. The analysis shows how much actionable security and intelligence context is visible through public DNS alone, without touching a single endpoint.
Re:Show HN: Dnsaudit.io – A Free Advanced DNS Security Scanner for Rea...
on Sunday December 14, 2025 @11:11AM (#46264085)
Hey st3fan! Thanks!
Yes we do!
Show HN: Dnsaudit.io – A Free Advanced DNS Security Scanner for Real-World Risks
Hi HN,I've been building DNSAudit.io in my spare time during weekends and late nights this year. It started as a small personal experiment and slowly grew into a full DNS security scanner.DNSAudit.io runs fully remote. No setup, no accounts. Just enter a domain, and it analyzes DNS security posture across multiple areas, not only configuration issues.It currently checks for:- Weak or missing...