Migrate Any Domain Without Access to the Old DNS Panel
Rebuild a client’s zone file from the outside — and import it straight into Cloudflare.
— THE PROBLEM
You’ve taken on a new client. Their site is live, email is flowing, subdomains are doing their thing — but nobody knows the login to the current DNS provider. Maybe the previous agency ghosted. Maybe the registrar account belongs to someone who left the company two years ago. Either way, you need to move this domain to new nameservers and you’re flying blind.
Most DNS lookup tools will hand you the A record, maybe the MX, and call it a day. That’s not enough to rebuild a working zone. You need the full picture — or as close to it as the public DNS will give you.
— YOUR HEAD START
Your Head Start on Every Migration
DNS Detective doesn’t need access to the old control panel. It queries the domain from the outside, pulling nine record types — A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, and CAA — and then goes further. It automatically probes common subdomains like www, mail, smtp, webmail, shop, blog, dev, and app. It checks for DKIM selectors across Google, Microsoft, Zoho, Mailchimp, and Mandrill. It finds DMARC policies and ACME challenge records.
Then it packages everything into a clean, BIND-compatible zone file you can download and import directly into Cloudflare, or any provider that accepts standard zone files.
Will it find every record? No — private subdomains and obscure entries that aren’t publicly resolvable won’t show up. But it finds significantly more than most tools, and that head start is often the difference between a smooth migration and a week of broken email.
— WHAT THIS MEANS FOR YOUR AGENCY
What This Means for Your Agency
→
Stop Reconstructing Zone Files by Hand
Instead of querying records one by one across multiple tools and copying values into a spreadsheet, DNS Detective gives you a downloadable zone file in one click. Copy it, download it, import it into Cloudflare — done.
→
Catch the Records Other Tools Miss
DNS Detective probes over a dozen common subdomains, multiple DKIM selectors, DMARC policies, and ACME challenge records. These are exactly the records that quietly break after a migration when nobody remembered to bring them over.
→
Know When You're Looking at Proxy IPs
DNS Detective detects Cloudflare nameservers and flags this clearly, so you don’t accidentally import proxy addresses as origin records in the new zone.
→
Give Clients a Professional Handoff
Run a lookup, download the zone file, and attach it to your proposal or migration plan. It’s documentation that takes zero extra effort.
→
Import-Ready Zone Files
The generated zone file follows the BIND format — the same format Cloudflare, AWS Route 53, and most serious DNS providers use for imports. No reformatting, no manual cleanup.
→
Works Anywhere You Need It
Embed the lookup tool on any page of your WordPress site with a simple Enter a domain to retrieve all DNS recordsDNS Lookup
— TESTIMONIALS
“We onboard about four new clients a month, and at least half of them don’t have DNS access. DNS Detective has become the first thing we run. The zone file export straight into Cloudflare has saved us hours.”
[PLACEHOLDER — replace with real quote]
“I was manually querying MX, TXT, CNAME, and A records in separate tools and pasting them into a doc. This does all of it in one shot and gives me a file I can actually import. I felt stupid for not having this sooner.”
[PLACEHOLDER — replace with real quote]
“It won’t find everything — we had a client with some obscure internal subdomains it couldn’t see — but it caught DKIM selectors and a DMARC record I definitely would have missed. That alone would have caused a week of email issues post-migration.”
[PLACEHOLDER — replace with real quote]
— THE BOTTOM LINE
What You're Leaving on the Table
Every migration without a proper DNS audit is a gamble. You move the nameservers, the site loads, everyone celebrates — and then three days later someone notices email authentication is failing because a DKIM selector didn’t make the trip. Or a mail. subdomain that handled SMTP relay is gone. Or the _acme-challenge record that auto-renewed the SSL cert vanished.
DNS Detective won’t eliminate every risk, but it gives you the most complete external snapshot available — the kind of starting point that turns a stressful migration into a routine one.
Run Your First Lookup
Type a domain and see what DNS Detective can recover. No account, no signup, no limits.
You don’t need the old panel. You just need the right tool.