Method, system and apparatus for discovering user agent DNS settings

A method comprising:

• receiving a first request for a first content from a second network device, said first request including a first domain name for locating a first network device and an IP address of said second network device;
• generating a second content including a second domain name for locating a domain name server, said second domain name corresponding to said IP address and said first domain name;
• sending said first content and said second content to said second network device;
• generating a second request including said second domain name and at least one local DNS setting of said second network device;
• said second network device sending said second request to a domain name server;
• said domain name server storing an association between said IP address and said at least one local DNS setting of said second network device;
• determining whether at least one of a current device IP address and current local DNS setting matches to a table of previously stored associations of approved prior IP addresses and prior local DNS settings;
• and
• notifying said network device that said at least one of a current device IP address and current local DNS setting may be at risk when it is determined that there is no match in said table.