Clean answer-only output

More dig commands

• Find authoritative nameservers via NS chase
  dig +nssearch example.comcopy

  Query each authoritative NS directly; reveals SOA serial mismatches between them

• Attempt a zone transfer (AXFR)
  dig axfr @ns1.example.com example.comcopy

  Dump full zone if AXFR is open; note: success on public NS is a misconfig

• Validate DNSSEC chain with RRSIG
  dig +dnssec +multi example.com @1.1.1.1copy

  Show RRSIG records; check AD flag in flags line for validated answer

• Trace delegation without DNSSEC noise
  dig +trace +nodnssec example.comcopy

  Follow delegation from root to authoritative, hiding RRSIG/DS clutter

• Compare answers from two resolvers
  diff <(dig +short @1.1.1.1 example.com) <(dig +short @8.8.8.8 example.com)copy

  Spot split-horizon or stale cache differences between resolvers

all 11 dig commands →