Query everything, everywhere
Fire queries at up to 10,000 nameservers in parallel. Ships with 84 built-in public resolvers from 6 providers. Add WHOIS with -w to see who's behind every IP.
All four protocols
UDP, TCP, DNS-over-TLS, DNS-over-HTTPS -- because it's not 2005 anymore. 84 pre-configured endpoints across Cloudflare, Google, Quad9, Mullvad, Wikimedia, and DNS4EU.
Hunt down subdomains
10+ discovery strategies chained automatically: CT logs, wordlists, AXFR, NSEC walking, SRV probing, TXT mining, permutation, recursive depth, and reverse DNS.
Lint your DNS
13 lints catch the things you forgot: lame delegation, missing SPF, broken DMARC, exposed zone transfers, open resolvers, DNSSEC gaps, and more.
Trace, diff, verify, propagate
Trace delegation from the root. Visualize DNSSEC trust chains. Diff records between nameservers or snapshots. Verify zone files in CI. Check propagation across the globe.
Interactive TUI + Rust library
mdive turns DNS into a browsable, drillable, filterable experience with vi-style keys and real-time discovery. Plus an async Rust library for building your own tools.