A DNS resolver is the service that turns a domain name such as example.com into an IP address that computers can reach. Most devices use a recursive resolver, often run by an ISP, enterprise, or security vendor, which asks other DNS servers until it finds an answer and caches the result for faster reuse.
Resolvers matter because they sit on the path of everyday network access. Attackers often rely on DNS to direct victims to phishing sites, malware hosts, or command-and-control servers; defenders can use protective resolvers to block, sinkhole, or rewrite requests for known-bad domains. A resolver’s policy, logging, and update speed can therefore influence whether suspicious traffic is allowed, noticed, or stopped.