osintverse-community/dns-records
Looks up a domain's A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records
Takes domain → finds dns record, domain, ip
No key · Docker
No key · Docker
Verified publisher
Look up a domain's DNS records
8 tools. 7 run with ot in a sandbox on Windows, macOS and Linux; 1 with otlite on Linux and macOS, no Docker. Compare them side by side ↓
DNS records are public and never redacted, which makes them the most reliable facts about a domain: where its website and mail are hosted, which cloud and security services it uses (from TXT verification records and CNAMEs), and whether its mail is protected against spoofing. The tools below read those records through ordinary resolvers.
With ot, in a sandbox
All domain tools →Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
osintverse-community/dnsx
Resolves a domain's DNS records (A, AAAA, CNAME, NS, TXT, MX, SOA, CAA) through public resolvers
Takes domain → finds dns record, domain, ip
No key · Docker
No key · Docker
Verified publisher
osintverse-community/dnsrecon
Enumerates a domain's DNS: standard records, SRV services, zone transfer checks and DNSSEC
Takes domain → finds dns record, domain, ip
No key · Docker
No key · Docker
Verified publisher
osintverse-community/checkdmarc
Checks a domain's SPF, DMARC, MX, BIMI and DNSSEC records and reports problems
Takes domain → finds dns record, domain
No key · Python wheel · 171 installs / 30 days
No key · Python wheel · 171 installs / 30 days
Verified publisher
osintverse-community/radar
Identifies the cloud, email, CDN and security services a domain uses from its DNS records
Takes domain → finds dns record, organization
No key · Docker
No key · Docker
Verified publisher
osintverse-community/quien
Looks up a domain's WHOIS/RDAP, DNS, mail security, TLS, HTTP headers, tech stack and SEO in one JSON report
Takes domain → finds certificate, dns record, ip, organization…
No key · Docker
No key · Docker
Verified publisher
osintverse-community/hackertarget
Finds a domain's subdomains and DNS records, or an IP's reverse DNS, network and hosted domains, via HackerTarget
Takes domain, ip address → finds dns record, domain, ip, organization…
No key · Docker
No key · Docker
Verified publisher
ot install osintverse-community/dns-records osintverse-community/dnsx osintverse-community/dnsrecon osintverse-community/checkdmarc osintverse-community/radarInstalls the first 5 in one go; ot auto d:… then runs every installed tool that takes a domain and saves the results. No ot yet? Install it in one line.
Without Docker, with otlite
All otlite tools →Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install fierce.
The 7 registry tools side by side
| osintverse-community/ | dns record, domain | None | Online, passive | No | Python | No reports yet | 171 |
| osintverse-community/ | dns record, domain, ip | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | dns record, domain, ip | None | Contacts the target | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | dns record, domain, ip | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | dns record, domain, ip, organization… | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | certificate, dns record, ip, organization… | None | Contacts the target | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | dns record, organization | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.
How to look up a domain's DNS records
- Pull the standard records (A, AAAA, MX, NS, TXT, CNAME) to see where the site and mail are hosted.
- Read the TXT and CNAME records for the services the domain has verified with (radar names them).
- Check SPF, DMARC and DNSSEC (checkdmarc) to see whether mail from the domain could be spoofed.
Every registry tool here runs on your machine in a sandbox, and ot auto d:… runs all the installed ones on one value.
Before you run one
Is a DNS lookup visible to the domain owner?
A lookup goes through public resolvers to the domain's name servers, as every visitor's does, so it doesn't stand out. A zone transfer attempt (dnsrecon checks for one) is different: it asks the name server directly, and dnsrecon's row says it contacts the target.
What do TXT records reveal?
Verification tokens for the services the domain uses (Google Workspace, Microsoft 365, Atlassian, marketing tools), its SPF policy naming who may send its mail, and sometimes notes left by administrators.
Do these tools send my search anywhere?
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.
Do I need an API key?
Most tools here work without one; the row says "Key required" when one is needed, and ot keys set stores it in your OS keychain so only that tool's container sees it.
More from a domain
SubdomainsEvery known URLLook-alike domainsWHOIS recordEmail addressesAll domain tools