DNS Zone Transfer Test (AXFR)

Ask each of a domain's authoritative nameservers for a full zone transfer. A nameserver that answers is misconfigured — it hands the entire zone (every subdomain, internal hostname, and mail record) to anyone who asks. A healthy nameserver refuses.