Resolver is the category-defining DNS intelligence platform. Query any record type, trace resolution paths, and visualize your entire domain infrastructure โ with zero blind spots.
We didn't just wrap a command โ we rearchitected DNS lookup for the modern stack. Every capability maps to a real workflow.
Query any DNS record โ A, AAAA, MX, NS,
TXT, CNAME, SOA, PTR, SRV โ
with a single unified interface using -t TYPE.
Cut the noise. Enable +short for machine-parseable, minimal output. Perfect for
scripts, pipelines, and automated monitoring workflows.
Follow every delegation hop from root nameservers to authoritative answer with
+trace. Complete visibility into the DNS resolution chain.
Verify cryptographic trust chains with +dnssec. Authenticate every response and
detect MITM tampering before it becomes a breach.
Map any IP back to its hostname with -x. Instant PTR record resolution for
forensics, auditing, and incident response.
Bypass local config and query specific nameservers with @server. Compare responses
across resolvers โ Google, Cloudflare, custom infra.
Force TCP connections with +tcp for large responses, zone transfers, and firewalled
environments. No packet truncation, ever.
Surgical output control with +noall +answer. Strip headers, authority, and
additional sections โ deliver only the records that matter.
Measure resolution performance with +stats. Query time, server used, message size,
EDNS info โ every metric you need for SLA tracking.
Interactive reference for every DNS record Resolver supports. Click a type to explore.
Watch a +trace query resolve in real time โ from root nameservers to
authoritative answer.
Build complex DNS queries with an interactive interface. Toggle flags, choose types, and see the command in real time.
Resolver wraps decades of DNS protocol knowledge into a frictionless developer workflow.
Specify your target domain, record type, and flags. Use @server to route through any
resolver. Build queries visually or from the CLI.
Resolver traverses the DNS hierarchy โ root, TLD, authoritative โ collecting answers, authority, and additional records at every level of delegation.
Inspect results, timing data, DNSSEC validation status, and response codes. Export in any format. Integrate with your monitoring pipeline.
Queue thousands of queries from a file. Resolver processes them sequentially, outputting results in order. Perfect for bulk domain audits and migration validation.
resolver -f domains.txt +short
Toggle recursive resolution with +recurse and +norecurse. Test
authoritative-only responses or debug resolver behavior at each level.
resolver example.com +norecurse
Expose or hide individual response sections โ +authority, +additional,
+comments. Surgical precision over what you see.
resolver +noall +answer +authority
Set persistent default flags in ~/.digrc. Apply +short,
+stats, or custom server preferences globally โ zero repetition.
echo "+short" > ~/.digrc
Query across DNS classes with -c CLASS. Support for IN (Internet), CH (Chaos), and
HS (Hesiod) class records for advanced diagnostics.
resolver -c CH version.bind TXT
Instantly resolve any IP to its hostname with -x. Automatic in-addr.arpa
construction. Essential for security forensics and log enrichment.
resolver -x 8.8.8.8
From solo developers to enterprise SOCs. Every plan includes unlimited record types.
+short mode+trace waterfall+dnssec validation.digrc profiles"Resolver's +trace waterfall saved us three hours during a misconfigured NS delegation. We saw the break instantly."
"We switched from manual dig commands to Resolver's Query Builder and cut our DNS audit workflow from 2 hours to 15 minutes."
"The DNSSEC validation view alone justified the Authority plan. Our security team can now audit trust chains without scripting."
All nine standard types: A, AAAA, MX, NS, TXT, CNAME, SOA, PTR, and SRV. We also support ANY queries for comprehensive domain snapshots and custom CLASS selection (IN, CH, HS).
A normal query sends a recursive request to your configured resolver. +trace
manually follows the delegation chain from root nameservers through TLD to authoritative,
showing every hop and referral โ like DNS packet capture without the complexity.
Absolutely. Use @server syntax to target any resolver โ @8.8.8.8 for
Google, @1.1.1.1 for Cloudflare, or any custom nameserver IP. Compare responses
across providers in seconds.
DNSSEC adds cryptographic signatures to DNS responses. Resolver's +dnssec flag
verifies these signatures, ensuring responses haven't been tampered with in transit โ critical
for preventing cache poisoning and man-in-the-middle attacks.
Yes. Use resolver -f domains.txt to process files with thousands of domains. Resolver
processes them sequentially with full output per query, perfect for migrations, audits, and
monitoring sweeps.
The ~/.digrc file lets you set persistent default flags. For example, adding
+short means every query automatically uses short mode. Think of it as your
personal DNS configuration profile.