Skip to main content

Documentation Index

Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt

Use this file to discover all available pages before exploring further.

In a previous lecture, we explained that a Zone Transfer is the process by which nameservers synchronize data. In DNS, the leader-follower architecture means that the primary nameserver receives updated records in a hosted zone file and secondary nameservers replicate this data using various mechanisms.
The image illustrates a "Leader Follower" concept with a sequence of nameservers and documents connected in a linear flow.
In this article, we focus on domain transfers. A domain transfer can refer to:
  • Changing the registrar that manages your domain
  • Transferring the domain ownership (registrant)
  • Or, performing both actions simultaneously
For instance, consider KodeKloud.com, which is managed using Cloudflare nameservers. If Mumshad Mannambeth decides to retain ownership but move KodeKloud.com from Cloudflare to AWS Route 53, this is considered a registrar transfer. Conversely, if the ownership of the domain is being transferred to someone else, it would be described as a registrant transfer.
The image explains "Domain Transfer" with two points: changing registrars and giving a domain to someone else.
It is also possible to transfer both ownership and registrar simultaneously. However, be aware that domain transfers can sometimes occur through malicious activities. Domain hijacking is a type of DNS attack where an attacker attempts to take control of your domain by impersonating you—for example, by sending fake emails on your behalf.
The image illustrates a "Domain Transfer: DNS Attack" with icons representing email and a hacker, connected by a line labeled "Domain hijacking: DNS attack."
Domain hijacking is particularly dangerous because ICANN considers email an acceptable method for assessing the legitimacy of a domain transfer.
To defend against domain hijacking, consider implementing these measures:
  • Always keep your domain locked. Domain locking is a feature provided by most registrars (often enabled by default) that prevents unauthorized transfers.
  • Keep your SOA (Start of Authority) records updated.
  • Enable auto-renewal on your domain to prevent accidental expiration.
  • Use strong authentication methods wherever possible.
The image provides four tips to defend against domain hijacking: keep your domain locked, update SOA records, enable auto-renewal, and use strong authentication methods.
Legitimate domain transfers are a standard part of domain management. However, if you suspect that your domain has been transferred without authorization, you can file a dispute with ICANN to investigate the issue and potentially reverse the transfer.

Watch Video