Language

Colour scheme

DNS Digger · zone export

Dig out the whole zone

Finds every DNS record of a domain that can be found and turns it into a zone file you can import at the new DNS provider.

Try: otw.solutions · orf.at · zonetransfer.me (AXFR)

How it works

  1. First, a zone transfer (AXFR) is attempted on every nameserver of the domain. If one allows it, the export is complete.
  2. Otherwise the nameservers are asked directly: apex records, about 250 common host names, DKIM selectors, SRV and _ records, plus every host name that appears in certificates (Certificate Transparency logs).
  3. Answers come straight from the authoritative nameservers, with the real TTLs and no resolver cache.

Moving checklist

  1. Lower TTLs: At least a day ahead (or as long as the old TTL), set the TTLs at the old provider to 300 seconds.
  2. Import the zone: Import the zone file at the new provider and compare it with the old provider’s control panel, especially MX, SPF/DKIM/DMARC and verification TXT records (Microsoft 365, Google).
  3. DNSSEC: If the zone is signed: remove the DS record at the registrar and wait for its TTL before switching nameservers.
  4. Switch nameservers: Enter the new provider’s nameservers at the registrar.
  5. Verify: Use DNS propagation to check that the new NS have arrived everywhere, then test website and mail.
  6. Clean up: Cancel the old provider only after 48 hours and raise the TTLs again.

Same in the terminal

$ curl tools.otw.solutions/dig/example.com > example.com.zone

Prints the zone file directly. JSON with ?format=json.