DNS risk framework