Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A safe hosting move separates three changes that are often confused: moving the website to a new host, changing the authoritative DNS provider or nameservers, and transferring the domain registration. Prepare and test the new infrastructure, copy and verify the complete DNS zone, plan DNSSEC and TTL changes, then cut over while monitoring both old and new systems. Keep the old host running until its traffic reaches zero and the replacement is demonstrably healthy.

First, define exactly what is changing

Write the scope in one sentence before touching DNS. For example: “Move the web application from Host A to Host B; keep the registrar, authoritative DNS, and mail provider unchanged.” A narrower change is easier to test and reverse.

Hosting migration

Your files, application runtime, database, certificates, scheduled jobs, firewall rules, and outbound integrations move to a new server or platform. DNS changes only decide where users are sent; they do not copy the site or its data.

Authoritative DNS migration

The nameservers listed at the parent zone (usually your TLD) change from one DNS provider to another. The new provider must contain a complete, correct zone before delegation changes. A registrar transfer is not required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

Domain-registration transfer

The registrar holding the registration changes. This does not automatically move hosting or DNS records. Check transfer eligibility, lock status, authorization requirements, and account access separately. Cloudflare’s documentation distinguishes registration transfer from the DNS configuration needed to reach a web host.

Ownership and access check

  • Record the current registrar, authoritative nameservers, DNS provider, web host, CDN or proxy, mail host, and certificate authority.
  • Confirm administrator access to the registrar, both DNS providers, old and new hosting, mail administration, and monitoring.
  • Nominate an owner for the cutover and a second person who can approve rollback.

Prepare and test the destination

Build the replacement before changing delegation. Google Search Central’s hosting-move guidance puts preparation and testing before the DNS change.

Application readiness

  • Restore a current database backup and upload the application and user-generated files.
  • Match the required runtime, extensions, environment variables, scheduled tasks, queues, and file permissions.
  • Install a valid HTTPS certificate for the apex domain and every required subdomain. Test redirects, canonical URLs, cookies, authentication, uploads, APIs, and webhooks.
  • Confirm the new server can handle expected traffic and that health checks, logs, alerts, backups, and rollback procedures work.

Test without public cutover

Use the host’s preview URL, a temporary hostname, an hosts-file override, or a staging deployment. Test from outside your corporate network. Do not rely only on an automated host migration wizard: it may copy files while missing runtime settings, secrets, cron jobs, firewall rules, or data written during the final sync.

Preserve search and verification controls

Keep Search Console ownership methods such as the HTML file, meta tag, or template integration when rebuilding the site. Remove temporary crawl blocks from the new environment when the move starts. Google notes that a short-term Googlebot crawl-rate fluctuation can be normal if the replacement remains accessible and responsive.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Inventory the complete current DNS zone

Export the zone file if the provider supports it, then query the authoritative nameservers directly. Save the export, query output, current TTLs, and a timestamp in your change record. An import scan is a starting point, not a backup: Cloudflare warns that automated scans are not guaranteed to find every existing record.

Records to capture

  • Website: apex A and AAAA records, www records, redirects, origin hostnames, and every important subdomain.
  • Email: MX records and priorities, SPF TXT, DKIM selector records, DMARC TXT, mail-host CNAMEs, autodiscover and submission records.
  • Services: SRV records, vendor verification TXT or CNAME values, certificate-authority authorization records, API endpoints, SIP or collaboration records, and complex CNAME chains.
  • Operations: CAA, DNSSEC-related data, health-check records, wildcard records, and any records used only by internal systems.

Compare answers, not just names

For each record, compare type, name, value, priority, proxy or DNS-only mode, and TTL. Query the current authoritative servers directly so a recursive resolver’s cached answer does not hide the live source. Ask mail and service owners to confirm every selector and vendor value instead of guessing.

Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Build the destination zone and plan TTLs

Replicate before changing nameservers

Create the destination zone to match the source, including records that will not change. Query the destination provider’s authoritative servers directly and compare apex, www, application subdomains, MX, TXT, SRV, and verification records. Correct differences before delegation.

Lower TTLs early enough

Lower the TTL on records whose values will change, and do so before the cutover. Existing recursive caches can retain the old value until the previous, longer TTL expires; lowering it at the last minute cannot flush those caches.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Cloudflare’s preparation guidance suggests lowering critical TTLs 24–48 hours in advance, or longer when current TTLs require it, and gives 300 seconds (five minutes) as a common short migration TTL.
  • Google Search Central’s 2025 guidance gives a conservative example of a few hours and recommends doing so at least a week before a hosting move.

These are provider-authored examples, not a universal schedule. Use the longest current TTL, resolver behavior, and your rollback window to choose the lead time. After stability is proven, restore operational TTLs according to your DNS provider’s guidance.

Isolate unrelated changes

If you are also changing a CDN, proxy, firewall, or application endpoint, separate those changes where possible. Cloudflare’s migration guidance recommends beginning with DNS-only records in its migration context so DNS delegation can be distinguished from proxy behavior.

Resolve DNSSEC before delegation

Check whether DNSSEC is enabled and whether a DS record is published at the registrar or parent zone. DNSSEC is a dependency of the nameserver change, not a detail to discover during the cutover.

Ordinary provider migration

Cloudflare’s documented ordinary route removes the old DS record and waits for its parent-zone TTL to expire before changing nameservers. If nameservers change while validating resolvers still expect the old DS record, DNSSEC validation can fail and the domain may become unreachable for those resolvers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Multi-signer route

Where both providers support it, a multi-signer DNSSEC method can let the new provider publish compatible DNSKEY data before delegation changes and avoid the ordinary unsigned interval. Follow the exact destination provider and registrar procedure.

Do not apply Cloudflare’s timing or commands to every TLD. DS TTLs, registrar interfaces, signing algorithms, and supported migration methods vary. Verify the actual parent-zone data and the instructions for your DNS host and registrar.

Cut over in a controlled window

  1. Freeze nonessential DNS edits, database schema changes, and deployments.
  2. Complete the final application and database sync; record the backup and rollback point.
  3. Recheck the destination zone and DNSSEC state. Confirm nameservers, DS handling, certificates, and firewall allowlists.
  4. Change only the intended A/AAAA/CNAME values or nameserver delegation. Record the exact UTC time, operator, old value, and new value.
  5. Query multiple public recursive resolvers and independent DNS-checking services. A single local resolver is not evidence of global convergence.
  6. Test the homepage, key routes, HTTPS certificate and redirects, login, checkout or other critical transactions, APIs, important subdomains, and mail flow if those records changed.
  7. Watch application, mail, firewall, CDN, and DNS logs on both old and new infrastructure.

Expect a mixed state while caches expire: some users may reach the old endpoint while others reach the new one. Keep both paths compatible during that window.

Monitor, roll back, and retire the old host

What to monitor

  • HTTP status, latency, TLS errors, origin errors, and synthetic checks from multiple regions.
  • New-host CPU, memory, database connections, queue depth, disk space, and application exceptions.
  • Old-host access logs, especially requests that indicate a cached DNS answer or an overlooked subdomain.
  • Mail delivery, bounce reports, SPF/DKIM/DMARC results, and vendor webhook or API success.

Rollback criteria

Rollback when critical paths fail, data is inconsistent, certificates are wrong, or the replacement cannot sustain traffic. Restore the previous record values or delegation using the recorded plan, keep the new host available for diagnosis, and do not delete evidence from either set of logs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Shutdown gate

Keep the old host active while cached answers can direct users there. Google Search Central states: “Check the server logs on the old provider and, once the traffic to the old provider reaches zero, you can shut down your old hosting infrastructure.” Apply that criterion together with a healthy new service, completed mail and integration checks, and a retained backup.

Troubleshooting common DNS migration failures

Some networks still show the old site

Cause: recursive caches still honor the previous TTL, or only one record was changed. Fix: check authoritative answers first, then compare several public resolvers; wait for the longest old TTL and verify A, AAAA, CNAME, and subdomain records.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

The domain is unreachable only for some users

Cause: DNSSEC DS/DNSKEY mismatch, inconsistent delegation, or an IPv6 (AAAA) endpoint that is not ready. Fix: inspect parent-zone DS and nameserver data, follow the provider’s DNSSEC migration procedure, and test IPv4 and IPv6 separately.

The website works but email stopped

Cause: missing MX, SPF, DKIM, DMARC, autodiscover, or mail-host records. Fix: compare the destination zone with the saved inventory and have the mail administrator validate sending and receiving from external accounts.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A vendor integration fails

Cause: a verification TXT/CNAME, SRV record, CAA policy, webhook allowlist, or complex CNAME chain was omitted. Fix: ask the service owner for the exact record and retest after its TTL expires.

HTTPS errors appear after the move

Cause: the certificate does not cover the hostname, SNI or proxy mode differs, or the origin firewall blocks the new path. Fix: issue or attach the correct certificate, test every hostname, and compare proxy, firewall, and origin settings.

DNSSEC validation fails after nameserver change

Cause: the parent still publishes the old DS record or the new provider’s DNSKEY does not match. Fix: stop further changes, verify parent and authoritative responses, and use the documented DS removal/wait or multi-signer procedure for your providers.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Choosing a destination DNS provider

Evaluate the workflow rather than choosing on a single feature. Confirm that the provider supports:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
  • Full-zone export and import plus a way to compare imported records manually.
  • The A, AAAA, CNAME, MX, TXT, SRV, CAA, wildcard, and proxy arrangements your services use.
  • A documented DNSSEC migration or multi-signer process for your registrar and TLD.
  • Validation, audit history, role-based access, API access, and support that matches your operating environment.

Provider documentation should state limitations clearly. No independent pricing or performance ranking is established here, so test the candidate with a copy of your real zone and a noncritical domain before committing.

Or skip the browser setup

For visual checks of the old and new sites during migration, ScreenshotNeo provides a website screenshot API and MCP server. A single request captures a clean image or PDF; cookie banners, newsletter popups, and chat widgets are removed before capture. Bot checks, blank pages, failed loads, timeouts, and cache hits are not billed, and response headers identify the page verdict and billing status.

cURL:

curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

Python:

import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)

Node.js:

const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);

See the ScreenshotNeo API documentation for options such as full-page capture, selector capture, waiting for network idle, custom headers and cookies, device presets, dark mode, PDF output, retries through async jobs, caching TTLs, and bulk capture. Its MCP server lets Claude, Cursor, and other MCP clients call take_screenshot, get_page_info, and capture_pdf. The Free plan includes 1,000 screenshots per month with no card; paid plans start at $5 for 3,000.

Create a free ScreenshotNeo account to capture migration checkpoints without setting up a browser.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Does moving a domain to a new registrar move my website?

No. Registration, authoritative DNS, and hosting are separate layers. A registrar transfer alone does not copy hosting or change the records that point to it.

How long should I wait before deleting the old server?

Wait until old-host logs show zero traffic, the new environment is healthy, and website, mail, DNSSEC, and integrations have passed validation. Cached users may otherwise still need the old path.

Can I lower a TTL immediately before cutover?

You can, but caches that already stored the previous longer TTL will not refresh early. Lower TTLs far enough in advance to cover that existing value.

Is disabling DNSSEC always required for a nameserver move?

No. The ordinary Cloudflare procedure removes the old DS and waits for its TTL, while compatible providers may support multi-signer DNSSEC. Use the method documented for your providers and TLD.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.