Security for everyone

DNS Zone Transfer Checker

DNS servers share zones using AXFR protocol. If it's misconfigured, attackers can get all DNS information related to your domain. You can use Security for Everyone’s DNS vulnerability scanner to scan your DNS zone transfer.


Short Info



Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

5 sec

Scan only one



DNS Zone Transfer Checker

What is DNS ?

DNS (Domain Name System) is a service that translates domain names into IP addresses. Users can easily remember domain names, but he computers understand IP addresses that’s why we need DNS. For example, without this service, you have to type '' in your browser instead of to access Facebook. IP - Domain mappings are kept on DNS servers. You can query those matches on

There are two types of IP addresses IPv4, and IPv6. IPv4 address looks like these:


IPv6 addressed looks like these (all of them are the same IP):


What is DNS Zone Transfer?

Zone transfer is actually a mechanism to share information between DNS servers. This process uses a protocol called AXFR. With this protocol, ZONE files on a DNS server, containing various DNS information are transferred from one server to another.

AXFR is also used in DNS queries to get zone information. An attacker can make this query to your DNS server. If your DNS server is not configured correctly, it will respond to all the queries regarding your domain name records (a, ns, mx, cname, txt etc.). With DNS zone transfer, attackers can learn all DNS information for your domain (including subdomains).


How to Check DNS Zone Transfer?


To test DNS zone transfer online, use our DNS zone transfer test tool. Write your domain on the form at the top of the page, that's all. If you want to test it yourself, continue reading.

If you are using a Linux or an OS X operating system, open terminal and type dig -t axfr If your DNS server allow to transfer zone files, it would look like that:

dig -t axfr
;; global options: +cmd	86400	IN	SOA 2020040313	86400	IN	A	86400	IN	NS	86400	IN	A	86400	IN	A	86400	IN	A	86400	IN	A	86400	IN	A	86400	IN	A	86400	IN	CNAME
cyber security services for everyone one. Free security tools, continuous vulnerability scanning and many more.
Try it yourself,
control security posture