← All Tools
DNS Mapper
Discover and visualize DNS infrastructure for security research and reconnaissance.
Enter a domain without protocol (e.g., example.com) ·
Checks performed: A, AAAA, MX, NS, TXT, SOA, CAA records, SPF (RFC 7208), DMARC (RFC 7489), and the network (ASN) and country of each IP address. Subdomains from certificate-transparency logs on request only. DNSSEC validation is NOT performed — the resolver cannot query DNSKEY/DS records. DKIM selectors are not enumerated.
🔒
DNS records are resolved server-side with PHP's native resolver. The network (ASN) and country of each IP come from the DB-IP Lite database stored on this server, so no IP address is sent to a third party. Subdomains are searched in certificate-transparency logs only when you click “Search certificate logs”, which sends the domain name to crt.sh. Nothing you enter is stored or logged with your identity. IP data: DB-IP Lite 2026-11, stored on this server. IP Geolocation by DB-IP (CC BY 4.0).