Domain Lookup - DNS Records & Infrastructure Analysis

A domain lookup analyzes a domain's complete DNS configuration — A records, nameservers, mail servers, TXT records — combined with threat intelligence data. Use robtex.com to map the full infrastructure and reputation of any website or email service.

Complete DNS Visibility

Domain lookup retrieves all public DNS records with DNSSEC validation and threat intelligence:

  • A / AAAA records - IPv4 and IPv6 addresses where the domain resolves
  • NS records - Authoritative nameservers with delegation flags
  • MX records - Mail servers with priority values
  • TXT records - SPF, DKIM, domain verification, and other text records
  • CNAME records - Aliases pointing to canonical hostnames
  • HTTPS/SVCB records - Modern TLS service bindings (ECH, ALPN)
  • SOA records - Zone authority information and serial numbers
  • DNSSEC status - Chain-of-trust validation from root zone

Investigating Domain Infrastructure

Enter any domain name to see its DNS configuration. Results show not just the records themselves but their relationships - which other domains share the same nameservers, which IPs host multiple sites, which mail providers handle delivery.

This graph view reveals infrastructure patterns. A domain using Cloudflare nameservers with Google Workspace mail and AWS hosting tells a different story than one using a single shared hosting provider for everything.

Practical Applications

Pre-purchase due diligence - Before acquiring a domain, check its current DNS state, historical infrastructure, and any lingering records from previous owners.

Migration planning - Document existing DNS configuration before switching providers. Identify all records that need recreation at the new host.

Email deliverability - Verify MX records point to correct mail servers and that SPF/DKIM TXT records are properly configured.

CDN and hosting analysis - Determine what infrastructure a site uses based on its A records and CNAME chains.

Domain Threat Intelligence

DNS Ninja integrates multiple reputation data sources:

  • Majestic Million - Global rank by backlink authority (if ranked)
  • Tranco Top 1M - Aggregated popularity ranking
  • HaGeZi blocklists - DNS-level threat detection
  • Blackbook - Malware domain identification
  • Risk-DB - Network category classification

This context reveals whether a domain is established and trustworthy or newly registered and potentially suspicious.

DNS Record History

Every domain lookup includes a timeline of DNS observations going back to 2009 (coverage varies by domain). For each record — nameservers, A records, MX records, and more — you can see:

  • First seen / last seen dates with observation count
  • Visual timeline showing periods of presence and absence
  • Drill-down details with individual observation timestamps
  • Infrastructure changes — track nameserver migrations, IP changes, and mail server transitions over time

This passive DNS history is invaluable for security investigations, domain acquisition due diligence, and understanding how infrastructure has evolved.

Reverse lookups also show historic relationships: "Previously NS for", "Previously MX for", and "Previously A record for" sections list domains that used to delegate to a nameserver, route mail through a server, or resolve to an IP — but no longer do.

Beyond Basic DNS

DNS Ninja correlates DNS data across millions of domains. When you look up a domain, you see not just its records but context: how many other domains use the same nameservers, what hosting patterns exist, and how the infrastructure compares to similar sites.

Our recursive resolver queries from root servers, validating DNSSEC along the way. You see exactly what authoritative nameservers return, not cached resolver data.

→ Analyze a domain on robtex.com

FAQ

Does domain lookup work for subdomains?
Yes. Enter any subdomain likemail.example.comorapi.example.comto see its specific DNS records.
How often is DNS data updated?
DNS records are queried in real-time. You see the current live configuration alongside historical observation data — each record includes a timeline showing when it appeared, disappeared, and reappeared over time.
What if a domain shows no records?
The domain may not exist, may have expired, or may have no public DNS records configured. Check that you entered the domain correctly.
Can I see historical DNS records?
Yes. Every domain lookup includes a full observation timeline for each record — showing when nameservers, A records, MX records, and other entries were first seen, last seen, and how they changed over time. Our passive DNS history goes back to 2009, with coverage varying by domain.
What is the DNSSEC status indicator?
Shows whether the domain has valid DNSSEC signatures verified from the root zone. "Secure" means cryptographically verified; "Insecure" means not signed.
What do the domain rankings mean?
Majestic and Tranco rankings indicate domain popularity and authority. Ranked domains are established sites; unranked domains may be new or low-traffic.