Validate public DNS resolvers against trusted baselines

dnsvalidator takes a list of public DNS servers and tests each one against trusted baseline resolvers, keeping only the servers that return accurate, untampered answers. Many public resolvers hijack NXDOMAIN responses, inject ads, or return stale records, and one bad resolver corrupts every brute-force run that touches it.

This is plumbing for the rest of a DNS pipeline. A mass resolver like massdns or shuffledns is only as reliable as its resolver list, so feeding it a validated set cuts false positives and wasted lookups at scale. The -threads and -timeout flags control how fast it works through a large candidate pool.

On Trickest, dnsvalidator is a Network node that takes a targets list and writes a file and a folder of verified resolvers. Run it before any high-volume resolution stage, and refresh the list on a schedule so it stays current as public servers appear and disappear.