Domain Transfer

Domain transfer allows you to move a domain and its associated data from one SpoofWard tenant or organization to another. This is useful when restructuring organizations, transferring ownership of a domain to a client or partner, or consolidating domains after a merger or acquisition.

When to Use Domain Transfer

• Client handoff — An MSP or consultant transferring a domain back to the client after setup
• Organizational restructuring — Moving domains between business units that use separate SpoofWard tenants
• Mergers and acquisitions — Consolidating domains from an acquired company into your primary tenant
• Partner transitions — Handing off domain management to a new service provider

Initiating a Transfer

Only workspace administrators can initiate domain transfers. The transfer is a two-step process requiring approval from both parties.

Step 1: Send Transfer Request

1. Navigate to the domain you want to transfer
2. Go to Domain Settings (gear icon on the domain overview page)
3. Scroll to the Transfer Domain section
4. Enter the recipient's email address — this must be an administrator of the receiving SpoofWard workspace
5. Optionally add a note explaining the transfer
6. Click Initiate Transfer
7. Confirm the action in the dialog that appears

Step 2: Recipient Accepts or Declines

The recipient receives an email notification containing:

• The domain name being transferred
• The sending organization's name
• Any notes from the sender
• A link to Accept or Decline the transfer

The recipient clicks the link, signs in to SpoofWard, and reviews the transfer details. They can then:

• Accept — The domain and its data are moved to their workspace
• Decline — The transfer is cancelled and the domain remains in the original workspace

Transfer requests expire after 7 days if not acted upon. The sender can cancel a pending transfer at any time before it is accepted.

What Transfers with the Domain

When a domain transfer is completed, the following data moves to the receiving workspace:

• DNS snapshots — Historical DNS record snapshots captured by SpoofWard
• DMARC report history — All aggregate (RUA) and forensic (RUF) reports received for the domain
• DNS change history — The full log of DNS changes detected over time
• Domain settings — Monitoring preferences, scan schedules, and alert configurations
• Email source inventory — Discovered third-party senders and their authentication status
• Threat history — Past threat detections and their resolution status
• DNS health score history — Historical health score data and trend information

What Does Not Transfer

• Alert channel assignments — Alert channels are workspace-level resources and do not move with the domain. The receiving workspace must configure their own alert channels.
• Webhook subscriptions — Webhooks remain in the sending workspace and are deactivated for the transferred domain.
• SIEM integration mappings — SIEM forwarding rules are workspace-level and do not transfer.
• Hosted DNS delegations — If the domain uses SpoofWard Hosted DNS, the delegation CNAME records will need to be reconfigured in the receiving workspace.

Transfer Status

Track the status of pending, completed, and declined transfers:

1. Navigate to Domain Settings → Transfer Domain
2. View the Transfer History section

Possible statuses:

• Pending — Waiting for the recipient to accept or decline
• Accepted — Transfer completed successfully
• Declined — Recipient declined the transfer
• Expired — Transfer request was not acted upon within 7 days
• Cancelled — Sender cancelled the transfer before it was accepted

After the Transfer

Once a transfer is accepted:

• The domain immediately appears in the receiving workspace
• The domain is removed from the sending workspace
• All historical data is accessible in the receiving workspace
• The receiving workspace should review and configure alert channels, webhooks, and any integration mappings for the domain
• If Hosted DNS was in use, update CNAME delegation records at the DNS provider

Troubleshooting

• Recipient did not receive the email — Verify the email address is correct and check the recipient's spam folder. The email is sent from [email protected].
• Transfer link expired — Initiate a new transfer request. Links expire after 7 days for security.
• Recipient cannot accept — The recipient must be an administrator in their SpoofWard workspace and their plan must support the number of domains they already manage.
• Domain count limit — If the receiving workspace has reached its plan's domain limit, the transfer cannot be accepted until they upgrade or remove another domain.