DNS Tools

Zone Transfer Test

Check whether the domain appears exposed to zone transfer or related enumeration risk.

About Zone Transfer Tests

Authoritative DNS servers should not allow unauthenticated AXFR access to the public internet. This test checks whether a zone-transfer exposure signal is present for the domain.

Why teams run this check

• Check for potential AXFR exposure
• Review whether authoritative servers appear restrictive
• Support quick DNS hardening checks
• Surface recommendations before a full audit

What to review

• Whether transfer access appears allowed
• Any vulnerable nameserver details returned
• Warnings or evidence from the backend
• Recommended follow-up mitigation steps

Use the free public result to review signals quickly, then move into the full workspace for continuous monitoring and deeper evidence.

PRO

Nodes Observed12

Resolved Nodes11

Dual-stack Coverage4 / 12

Refresh Window5m

PREVIEW

warningDKIM key strengthreview

errorMTA-STS missingfix

check_circleTLS-RPT not configuredinfo

PRO

PREVIEW

Real-time alertsDISABLED

Cadence—

Enable monitoring with a free account.

PRO

Unlock the full Zone Transfer Test workspace

Create a free account to unlock full access

See full findings

Track this domain daily

Review change history

Get AI analysis

Export analyst-ready evidence