DomainToDNSName ZT
From Paterva Wiki
DomainToDNSName_ZT
This transform attempts a zone transfer (AXFR) on the Domain. You can read more on a zone transfer at Wikipedia . If possible it extracts the Cnames and A records from the zone as DNSName. If a zone transfer is possible then all the DNS names associated with the domain is returned, and there is no need to brute force it anymore. The results of a succcessful zone transfer normally results in a very happy analyst as resolving these DNS names to IPAddress gives a very good indication of the network location of the target.
Typical uses
Used in infrastructure footprinting for finding the network location of a target
Domain via transform DomainToDNSName_ZT to
DNSName via transform DNSNameToIPAddress_DNS to
IPAddress via transform IPAddressToNetblock to
Netblock From there you can do all sorts of things like:
NetblockEntity to NetblockToLocation_SS to
Location for geo locations etc.