“BadDNS does cover some well-explored ground, such as detecting dangling CNAME and NS records—these are areas many other tools also address. However, several features make BadDNS stand out,” Paul Mueller, the developer of BadDNS, told Help Net Security.
BadDNS doesn’t just stop at detecting subdomain takeovers. The references module goes a step further by looking at any domains the target website trusts to find “second-order” takeovers.