DNS Zone Transfer Test (AXFR)
Ask each of a domain's authoritative nameservers for a full zone transfer. A nameserver that answers is misconfigured — it hands the entire zone (every subdomain, internal hostname, and mail record) to anyone who asks. A healthy nameserver refuses.
More DNS tools
- A RecordIPv4 address for a domain
- AAAA RecordIPv6 address for a domain
- CNAME RecordDomain alias lookup
- MX RecordMail servers for a domain
- NS RecordAuthoritative nameservers
- TXT RecordArbitrary text records
- SOA RecordZone authority details
- CAA RecordAuthorized certificate issuers
- Propagation CheckerCheck a record across global resolvers
- WHOIS LookupRegistrar, creation/expiry dates, and nameservers
- DNSSEC CheckerCheck DNSSEC signing and chain-of-trust validation
- RDNS LookupReverse DNS (PTR) lookup for an IP address
- SRV RecordService records (priority, weight, port, target)
- DS RecordDNSSEC delegation signer records at the parent zone