An DNS A-record is a basic Domain Name System record that maps a domain name to an IPv4 address. When a device resolves a hostname, the DNS response tells it which IP address to connect to. In normal use, this lets browsers, mail clients, and other services reach the right server without users typing numeric addresses.
In cyber security, A-records matter because attackers can abuse DNS as more than simple naming. A malicious operator may change A-record responses to steer malware toward one server, a backup server, or a cloud relay, effectively using DNS as a lightweight control signal. That makes blocking harder: the destination can shift without changing the domain name. Defenders watch for unusual lookup timing, rapidly changing answers, or DNS queries that precede suspicious HTTPS traffic. Correlating DNS logs with proxy and endpoint data can reveal route-switching behavior and help distinguish legitimate infrastructure from command-and-control traffic.