Domain Tools

DNS Zone Transfer Test

Test whether a domain's authoritative nameservers allow DNS zone transfer (AXFR). A nameserver that permits zone transfer hands over your complete DNS record set to anyone who asks, exposing internal hostnames, mail infrastructure, and network layout.

About DNS zone transfer
Zone transfer (AXFR) is a mechanism that allows DNS servers to replicate a zone from a primary to a secondary nameserver. When unrestricted, any client can request a full copy of the DNS zone, revealing every hostname, IP address, mail server, and service record configured for the domain. This information assists attackers in mapping a target's infrastructure before an attack. Modern DNS providers restrict zone transfer by default, but misconfigured self-hosted nameservers are still commonly found exposed.