Find authoritative nameservers via NS chase

More dig commands

• Attempt a zone transfer (AXFR)
  dig axfr @ns1.example.com example.comcopy

  Dump full zone if AXFR is open; note: success on public NS is a misconfig

• Validate DNSSEC chain with RRSIG
  dig +dnssec +multi example.com @1.1.1.1copy

  Show RRSIG records; check AD flag in flags line for validated answer

• Trace delegation without DNSSEC noise
  dig +trace +nodnssec example.comcopy

  Follow delegation from root to authoritative, hiding RRSIG/DS clutter

• Compare answers from two resolvers
  diff <(dig +short @1.1.1.1 example.com) <(dig +short @8.8.8.8 example.com)copy

  Spot split-horizon or stale cache differences between resolvers

• Reverse PTR lookup for IPv6
  dig -x 2606:4700:4700::1111 +shortcopy

  PTR for an IPv6 address; -x expands nibble format automatically

all 11 dig commands →