DNS Digger · zone export

zonetransfer.me

Finds every DNS record of a domain that can be found and turns it into a zone file you can import at the new DNS provider.

Zone

Complete (AXFR)

Records
50 SOA 1 · NS 4 · A 13 · MX 7 · TXT 11 · HINFO 1 · TYPE37 1 · SRV 1 · PTR 1 · AFSDB 2 · AAAA 2 · LOC 1 · NAPTR 2 · RP 1 · CNAME 2
Zone transfer from
nsztm1.digi.ninja
Nameservers
nsztm1.digi.ninja 81.4.108.41
nsztm2.digi.ninja 5.196.105.10

Took 0.1 s · 0 DNS queries to the authoritative nameservers. Results are cached for 5 minutes.

Moving checklist

  1. Lower TTLs: At least a day ahead (or as long as the old TTL), set the TTLs at the old provider to 300 seconds.
  2. Import the zone: Import the zone file at the new provider and compare it with the old provider’s control panel, especially MX, SPF/DKIM/DMARC and verification TXT records (Microsoft 365, Google).
  3. DNSSEC: If the zone is signed: remove the DS record at the registrar and wait for its TTL before switching nameservers.
  4. Switch nameservers: Enter the new provider’s nameservers at the registrar.
  5. Verify: Use DNS propagation to check that the new NS have arrived everywhere, then test website and mail.
  6. Clean up: Cancel the old provider only after 48 hours and raise the TTLs again.

Check NS propagation →

⚠ Zone transfers (AXFR) are open to anyone. Handy for the move, but anyone can read every record. Restrict AXFR on the old server to your own secondary nameservers.

⚠ The zone is signed with DNSSEC. Remove the DS record at the registrar and wait for its TTL before switching nameservers, otherwise the domain becomes unreachable for validating resolvers. Re-enable DNSSEC at the new provider afterwards.

Zone file (BIND)

Imports into Cloudflare, Hetzner, INWX, PowerDNS, Route 53, Azure DNS and most other providers. SOA and apex NS are commented out, because the new provider sets its own.

; Zone export for zonetransfer.me (tools.otw.solutions/dig)
; Generated 2026-10-16T17:07:05Z
; Complete zone transfer (AXFR) from nsztm1.digi.ninja.
; SOA and apex NS belong to the old provider; the new provider creates its own. Kept as comments.
; DNSSEC records were left out, because the new provider signs the zone itself.

$ORIGIN zonetransfer.me.
$TTL 7200

; @                               7200 IN SOA    nsztm1.digi.ninja. robin.digi.ninja. 2019100801 172800 900 1209600 3600
; @                               7200 IN NS     nsztm1.digi.ninja.
; @                               7200 IN NS     nsztm2.digi.ninja.
@                               7200 IN A      5.196.105.14
@                               7200 IN MX     0 aspmx.l.google.com.
@                               7200 IN MX     10 alt1.aspmx.l.google.com.
@                               7200 IN MX     10 alt2.aspmx.l.google.com.
@                               7200 IN MX     20 aspmx2.googlemail.com.
@                               7200 IN MX     20 aspmx3.googlemail.com.
@                               7200 IN MX     20 aspmx4.googlemail.com.
@                               7200 IN MX     20 aspmx5.googlemail.com.
@                                301 IN TXT    "google-site-verification=tyP28J7JAUHA9fw2sHXMgcCC0I6XBmmoVi04VlMewxA"
@                                300 IN HINFO  "Casio fx-700G" "Windows XP"
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
_acme-challenge                  301 IN TXT    "6Oa05hbUJ9xSsvYy7pApQvwCUSSGgxvrbdizjePEsZI"
_sip._tcp                      14000 IN SRV    0 0 5060 www.zonetransfer.me.
14.105.196.5.in-addr.arpa       7200 IN PTR    www.zonetransfer.me.
asfdbauthdns                    7900 IN AFSDB  1 asfdbbox.zonetransfer.me.
asfdbbox                        7200 IN A      127.0.0.1
asfdbvolume                     7800 IN AFSDB  1 asfdbbox.zonetransfer.me.
canberra-office                 7200 IN A      202.14.81.230
cmdexec                          300 IN TXT    "; ls"
contact                       2592000 IN TXT    "Remember to call or email Pippa on +44 123 4567890 or pippa@zonetransfer.me when making DNS changes"
dc-office                       7200 IN A      143.228.181.132
deadbeef                        7201 IN AAAA   dead:beaf::
dr                               300 IN LOC    \# 16 001216138B728CEE7FA5C44A00989680
dzc                             7200 IN TXT    "AbCdEfG"
email                           7200 IN A      74.125.206.26
email                           2222 IN NAPTR  1 1 "P" "E2U+email" "" email.zonetransfer.me.zonetransfer.me.
hello                           7200 IN TXT    "Hi to Josh and all his class"
home                            7200 IN A      127.0.0.1
info                            7200 IN TXT    "ZoneTransfer.me service provided by Robin Wood - robin@digi.ninja. See http://digi.ninja/projects/zonetransferme.php for more information."
internal                         300 IN NS     intns1.zonetransfer.me.
internal                         300 IN NS     intns2.zonetransfer.me.
intns1                           300 IN A      81.4.108.41
intns2                           300 IN A      5.196.105.10
office                          7200 IN A      4.23.39.254
ipv6actnow.org                  7200 IN AAAA   2001:67c:2e8:11::c100:1332
owa                             7200 IN A      207.46.197.32
robinwood                        302 IN TXT    "Robin Wood"
rp                               321 IN RP     robin.zonetransfer.me. robinwood.zonetransfer.me.
sip                             3333 IN NAPTR  2 3 "P" "E2U+sip" "!^.*$!sip:customer-service@zonetransfer.me!" .
sqli                             300 IN TXT    "' or 1=1 --"
sshock                          7200 IN TXT    "() { :]}; echo ShellShocked"
staging                         7200 IN CNAME  www.sydneyoperahouse.com.
alltcpportsopen.firewall.test    301 IN A      127.0.0.1
testing                          301 IN CNAME  www.zonetransfer.me.
vpn                             4000 IN A      174.36.59.154
www                             7200 IN A      5.196.105.14
xss                              300 IN TXT    "'><script>alert('Boo')</script>"

All records

NameTypeTTLValueSource
@SOA7200nsztm1.digi.ninja. robin.digi.ninja. 2019100801 172800 900 1209600 3600AXFR
@NS7200nsztm1.digi.ninja.AXFR
@NS7200nsztm2.digi.ninja.AXFR
@A72005.196.105.14AXFR
@MX72000 aspmx.l.google.com.AXFR
@MX720010 alt1.aspmx.l.google.com.AXFR
@MX720010 alt2.aspmx.l.google.com.AXFR
@MX720020 aspmx2.googlemail.com.AXFR
@MX720020 aspmx3.googlemail.com.AXFR
@MX720020 aspmx4.googlemail.com.AXFR
@MX720020 aspmx5.googlemail.com.AXFR
@TXT301"google-site-verification=tyP28J7JAUHA9fw2sHXMgcCC0I6XBmmoVi04VlMewxA"AXFR
@HINFO300"Casio fx-700G" "Windows XP"AXFR
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
_acme-challengeTXT301"6Oa05hbUJ9xSsvYy7pApQvwCUSSGgxvrbdizjePEsZI"AXFR
_sip._tcpSRV140000 0 5060 www.zonetransfer.me.AXFR
14.105.196.5.in-addr.arpaPTR7200www.zonetransfer.me.AXFR
asfdbauthdnsAFSDB79001 asfdbbox.zonetransfer.me.AXFR
asfdbboxA7200127.0.0.1AXFR
asfdbvolumeAFSDB78001 asfdbbox.zonetransfer.me.AXFR
canberra-officeA7200202.14.81.230AXFR
cmdexecTXT300"; ls"AXFR
contactTXT2592000"Remember to call or email Pippa on +44 123 4567890 or pippa@zonetransfer.me when making DNS changes"AXFR
dc-officeA7200143.228.181.132AXFR
deadbeefAAAA7201dead:beaf::AXFR
drLOC300\# 16 001216138B728CEE7FA5C44A00989680AXFR
dzcTXT7200"AbCdEfG"AXFR
emailA720074.125.206.26AXFR
emailNAPTR22221 1 "P" "E2U+email" "" email.zonetransfer.me.zonetransfer.me.AXFR
helloTXT7200"Hi to Josh and all his class"AXFR
homeA7200127.0.0.1AXFR
infoTXT7200"ZoneTransfer.me service provided by Robin Wood - robin@digi.ninja. See http://digi.ninja/projects/zonetransferme.php for more information."AXFR
internalNS300intns1.zonetransfer.me.AXFR
internalNS300intns2.zonetransfer.me.AXFR
intns1A30081.4.108.41AXFR
intns2A3005.196.105.10AXFR
officeA72004.23.39.254AXFR
ipv6actnow.orgAAAA72002001:67c:2e8:11::c100:1332AXFR
owaA7200207.46.197.32AXFR
robinwoodTXT302"Robin Wood"AXFR
rpRP321robin.zonetransfer.me. robinwood.zonetransfer.me.AXFR
sipNAPTR33332 3 "P" "E2U+sip" "!^.*$!sip:customer-service@zonetransfer.me!" .AXFR
sqliTXT300"' or 1=1 --"AXFR
sshockTXT7200"() { :]}; echo ShellShocked"AXFR
stagingCNAME7200www.sydneyoperahouse.com.AXFR
alltcpportsopen.firewall.testA301127.0.0.1AXFR
testingCNAME301www.zonetransfer.me.AXFR
vpnA4000174.36.59.154AXFR
wwwA72005.196.105.14AXFR
xssTXT300"'><script>alert('Boo')</script>"AXFR

Same in the terminal

$ curl tools.otw.solutions/dig/zonetransfer.me > zonetransfer.me.zone

Prints the zone file directly. JSON with ?format=json.