#198·flowsint

domain_to_dns enricher fails: dnsx missing required -w (wordlist) flag

Author: Kobayashy2Created Jul 19, 2026Updated Jul 19, 2026

Bug description The domain_to_dns enricher (dnsx) fails on every run with a Docker command error.

Error log Error running dnsx: Docker error while running projectdiscovery/dnsx:latest: Command '-d amalya-ia.fr -a -aaaa -json -silent' in image 'projectdiscovery/dnsx:latest' returned non-zero exit status 1: missing wordlist(w) flag required with domain(d) input

Steps to reproduce

  1. Fresh install via make prod on Docker Desktop (Windows/WSL2)
  2. Add a domain entity (e.g. amalya-ia.fr)
  3. Launch domain_to_dns enricher
  4. Enricher fails immediately, no output

Expected behavior DNS resolution (A/AAAA records) without requiring a wordlist flag, per the enricher description ("Resolve a domain's A/AAAA records using dnsx").

Environment

  • Flowsint installed via docker-compose.prod.yml, latest images
  • Docker Desktop on Windows, WSL2 backend
  • Other enrichers (domain_to_website) work fine after fixing an unrelated docker.sock permission issue on celery/api containers (group_add: ["0"] needed for non-root container user to access the mounted socket)

Note domain_to_asn also requires a PDCP_API_KEY vault secret not mentioned anywhere in setup docs — might be worth documenting which enrichers need external API keys upfront.