v3.1.0

What's New

Fixes

• Scans are dramatically faster (#102) — two bugs forced every domain down the slow path: the worksites.net fingerprint's empty CNAME pattern matched every domain (triggering extra DNS queries plus an HTTP fetch per domain), and SRV checks fired ~28 DNS queries per domain on every scan. SRV takeover detection is now opt-in via -srv.
• Zone transfers are actually detected — the AXFR reader treated the clean end-of-stream envelope (io.EOF) as a failure, so -axfr never reported a successful transfer.
• Installs no longer OOM on small VPSes (#57) — the heavyweight zonedb dependency chain is gone; availability checks now use RDAP (RFC 9083) with a whois fallback via available v1.1.1.

Additions

• 69-test hermetic suite (local DNS/HTTP fixtures), race-clean, enforced in CI
• -r resolver list entries may be host:port
• JSON output no longer mislabels -m DEAD DOMAIN results as unregistered domains
• Threads and Timeout default sensibly when unset

Housekeeping

• Relicensed under MIT
• Security bump: golang.org/x/net v0.61.0