Dig has a dizzying array of options and outputs but it’s my favorite way to query DNS https://jvns.ca/blog/2021/12/04/how-to-use-dig/ has some really good info…stuff I didn’t know (or remember) after 20+ years of using it. From basics to more advanced topics, it’s a handy guide and tutorial on what you can do and HOW to do it.
The easiest way to protect yourself from malware etc is to use a DNS provider like quad9.net or nextdns.io. They filter all hostname requests thru databases they maintain and WON’T LET YOU go to a known bad host by just not resolving that hostname! Please, for your own sake, do it now.
I won’t go into details about DNS…if you need more info check https://www.cloudflare.com/learning/dns/what-is-dns/