loading
Loading content
loading
OSINT
Look up DNS records on DNSDumpster.
overview
DNSDumpster DNS Lookup queries the DNSDumpster service for a root domain and returns the DNS records it holds: host (A) records with their IPs, name servers, mail servers, and the TXT records tied to the domain. Because the data comes from DNSDumpster's own collection rather than probes you send, it maps a domain's DNS footprint without touching the target.
This is the node that opens a recon workflow. One domain goes in, and a structured view of the domain's DNS surface comes out, seeding subdomain lists and infrastructure mapping before any active scanning starts.
Reach for it when you want DNS intelligence on a domain quietly, then hand the hostnames it returns to httpx to learn which are live, or to dnsx to resolve and enrich them.
source github.com/trickest
use cases
Pull a domain's hosts, name servers, and mail records from DNSDumpster to scope an engagement without sending traffic to the target.
Capture the DNS records tied to a root domain as a starting inventory the rest of the workflow expands and verifies.
Read the MX, NS, and TXT records to see how a domain routes mail and delegates DNS before you probe any host.
Hand the returned hostnames to httpx or dnsx so the workflow continues from a passively gathered seed set.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domain | STRING | · | Root domain to enumerate (passed as the node's single input). |
Showing key inputs. dnsdumpster-dns-lookup exposes 1 inputs in total.
example
# passive DNS records for a domain via DNSDumpsterdnsdumpster-dns-lookup example.comHost Records (A)example.com 203.0.113.10 HTTP: nginx AS64500 Example Cloudwww.example.com 203.0.113.11 HTTP: nginx AS64500 Example Cloudmail.example.com 203.0.113.25 SMTP AS64500 Example CloudDNS Serversns1.example.com 198.51.100.53 AS64500 Example Cloudns2.example.com 198.51.100.54 AS64500 Example CloudMX Records10 mail.example.comTXT: v=spf1 include:_spf.example.com ~allguidance
Use DNSDumpster DNS Lookup at the start of recon when you want DNS records for a domain without querying it directly. For a host-centric search on the same service, use dnsdumpster-host-search. To actively resolve records yourself, use dnsx or dnsrecon.
Host-focused search on the same service. This node returns the domain's DNS records instead.
Actively resolves DNS records against your own resolvers. DNSDumpster Lookup is passive.
Active multi-technique DNS enumeration. Use it when you want to query the domain directly.
faq
related
Look up a host on DNSDumpster.
Find lookalike domains adversaries use for typosquatting, phishing, and brand impersonation.
List all public repositories for valid GitHub usernames.
Look up the real IP of a host starting from its favicon and using Shodan.
Gather email account intelligence from public sources and check it against breach data.
Collect a dossier on a person by username across thousands of sites.
A domain feeds DNSDumpster DNS Lookup, which returns its DNS records passively and passes the hosts to httpx before they land as output.
Facts on this page come from the live Trickest tool library.