Domain Tools

Recover a DNS zone file from a live domain by querying publicly available DNS records. This tool reconstructs A, AAAA, CNAME, MX, TXT, NS, SOA, and CAA records into an RFC 1035-compatible zone file that can be imported directly into most DNS providers.

Useful when migrating DNS providers, rebuilding a lost zone configuration, or creating a snapshot of your current DNS setup before making changes. The tool can discover your existing nameservers automatically, or pre-populate the zone file with the NS records of a provider you're migrating to (Cloudflare, AWS Route 53, GoDaddy, Namecheap, and others), ready to import.

Only publicly visible DNS records are accessible. Private or split-horizon records and DNSSEC signing material cannot be recovered through public queries.

Check whether DNS changes have reached major global resolvers including Google, Cloudflare, Quad9, OpenDNS, AdGuard and CleanBrowsing. Resolvers are queried in parallel and results compared to identify which ones are still serving an old record.

Supports A, AAAA, CNAME, MX, NS, TXT and SOA record types. Shows the consensus value, a per-resolver propagation status, and a propagation percentage. Useful after changing hosting, switching DNS providers, or updating MX records.

Test whether a domain's authoritative nameservers allow DNS zone transfer (AXFR). A nameserver that permits unrestricted zone transfer hands over your complete DNS record set to anyone who requests it, exposing internal hostnames, mail infrastructure, and network layout.

Tests each nameserver in parallel and reports which ones refused the transfer and which allowed it, including the number of records exposed. Zone transfer should only be permitted between primary and secondary nameservers, never to arbitrary clients.

Check whether a website publishes a valid security.txt file as defined by RFC 9116. A security.txt file tells security researchers how to responsibly disclose vulnerabilities to an organisation.

Checks both standard locations (/.well-known/security.txt and /security.txt), validates the required Contact and Expires fields, flags expired files, and reports all optional fields including Policy, Encryption, Preferred-Languages, Canonical, Acknowledgments and Hiring.

Retrieve domain registration information using the modern RDAP protocol, with automatic fallback to legacy WHOIS for TLDs that don't yet support it.

RDAP (Registration Data Access Protocol) returns structured data directly from registries, more complete and consistent than WHOIS, which varies widely by registry. This tool queries RDAP first, then falls back to WHOIS if necessary, always returning the best available data.

See registrar details, registration and expiration dates, nameservers, DNSSEC status, and domain status codes in one view. Expiry dates are colour-coded (red under 14 days remaining, amber under 60) so you can spot at-risk domains at a glance. Domain status codes such as clientDeleteProhibited and serverTransferProhibited are displayed as labelled badges to help diagnose transfer and renewal problems quickly.

Monitor third-party payment processor scripts for unexpected changes — relevant to PCI DSS v4 requirement 6.4.3, which requires organizations to maintain an inventory of payment page scripts and have a method to confirm their integrity.

Checks SHA-256 hashes of scripts from Stripe, Authorize.Net, PayPal, Square, Checkout.com, Worldpay, Mollie, Klarna, Cybersource, Amazon Pay and more — daily, with a public change history. Free browser push notifications alert you the moment a change is detected, with no account or email required.

Add your payment page URL and monitor for changes to page content, HTTP security headers, and CORS configuration — relevant to PCI DSS v4 requirement 11.6.1, which requires a mechanism to detect and alert on unauthorized changes to payment pages.

Unlike the Processor Watcher, which monitors third-party scripts from outside your environment, the Payment Page Monitor will watch your own payment page for unexpected modifications. Browser notifications will alert you when changes are detected.