There is even a tool for this called dnsxss.