~/tools $ ./dig --explain
DNS Lookup
Look up any domain or URL and get its records plus a plain-English read on mail security, DNSSEC, hosting, and third-party services.
Queries are sent from your browser to Cloudflare's public DNS-over-HTTPS resolver (1.1.1.1). Nothing goes to h0m1c1de.
Findings
Records
What this tells you
DNS records are public by design, and they say a lot about an organization: who handles its email, whether that email can be spoofed, where its site is hosted, and which SaaS vendors it uses. It is usually the first thing to check during reconnaissance, and the first thing defenders should audit on their own domains.
New to DNS? Read DNS Explained for what each record type means.
Same thing from the command line
dig +short A example.com
dig +short MX example.com
dig +short TXT example.com
dig +short TXT _dmarc.example.com
dig +short CAA example.com