When a suspicious domain appears in phishing or malware alerts, quickly assessing its complete DNS footprint is critical. Running individual queries for each record type is slow and inefficient.
Silent Push PADNS solves this by delivering an instant, aggregated view of all raw DNS records for the domain and (optionally) its subdomains — directly inside Total View.
Top-Level Record Counts
Right below the main navigation, you’ll see a clear summary line showing the total count for each record type:
A (8) AAAA (0) CNAME (0) NS (10) MX (2) SOA (12,165) TXT (34) Wildcard (0)
These counts update dynamically based on your filters and whether Domain Wide View is enabled. Click any type to filter the table instantly.
Fast Filtering
Clicking any record type in the count row (A, NS, MX, TXT, etc.) instantly narrows the table to that type only.
You can also combine multiple filters for precise results. This makes drilling down extremely fast.
PADNS Timeline (Chart) View
A new Timeline (Chart) view is now available in the PADNS section alongside the classic table view.
Use the Table and Chart icons in the top-right corner of the tab to switch between the two views instantly.
Your active filters, sort order, and pagination position are preserved when toggling.
In Timeline view, each DNS record is displayed as a horizontal bar. The length of the bar represents the exact duration between the record’s first-seen and last-seen timestamps, giving you an immediate visual sense of how long that infrastructure was active.
Domain Wide View
Toggle the “Include” button under Domain Wide View to expand results to all discovered subdomains (blog.example.com, api.example.com, etc.). This is essential for spotting:
Subdomain-specific misconfigurations
Dangling DNS records
Inconsistent SPF/DKIM records
Fast-flux or load-balanced infrastructure
What PADNS Reveals at a Glance
Misconfigurations — outdated MX records, wrong nameservers
Risky infrastructure — high-risk or previously abused providers
Dangling DNS risks
Fast-flux & high IP churn
Historical changes via First Seen / Last Seen timestamps
Community users get full raw PADNS data for free.
Enterprise users receive additional IOFA™ threat-feed enrichment and advanced pivots.
The Results Table
Below the counts is a clean, filterable table showing:
Query (domain or subdomain)
Answer (IP, nameserver, TXT string, etc.)
Answer ASN + AS Name
Country Code
First Seen / Last Seen
Record Types Explained
A Record (Address Record)
Definition: Maps a domain/subdomain to an IPv4 address.
Example: paypal.com → 151.101.195.1 (AS54113, FASTLY, US)
AAAA Record (Quad-A)
Maps a domain to an IPv6 address.
CNAME Record (Canonical Name)
Creates an alias to another domain name.
MX Record (Mail Exchange)
Specifies mail servers and their priority.
NS Record (Name Server)
Lists the authoritative nameservers for the domain.
SOA Record (Start of Authority)
Contains administrative metadata (primary NS, serial number, refresh timers, etc.). High counts are normal.
TXT Record
Free-form text — commonly used for SPF, DKIM, DMARC, and domain verification.
How to Use PADNS
Search a domain in Total View
Go to the PADNS tab
Review the count summary at the top
Toggle Domain Wide View for subdomain coverage
Apply filters (record type, time range, etc.)
Click any row to pivot to deeper analysis
Real-World Example: paypal.com
The screenshot shows 8 A records resolving to Fastly and other CDNs, 10 NS records, thousands of SOA entries, and 34 TXT records — typical of a large, high-security domain. Timestamps allow you to track infrastructure changes over time.
PADNS replaces dozens of manual dig/nslookup commands and gives threat hunters, researchers, and security teams fast, complete, actionable DNS intelligence in a single view.