Skip to content
Included in every domain

Hidden Primary: your source, our network

You maintain the zone on your own nameserver. We pull it by zone transfer and answer queries at 17 locations in 15 countries.

Find a domainAlready a customer? Set up Hidden Primary

Included in every domain, at no extra cost

.de: €3.99 in the first year

€19.00 per additional year

All prices include 19 % German VAT.

  • Hourly zone transfer on a new serial
  • Taken over in one step
  • Answers from 17 locations
Zone transfer (AXFR), allowed for the address the customer area names; hourly, when the serial number has changed.

Zone yourname.com

Example
  • ; source: your nameserver
  • yourname.com.SOA… 2026092301
  • ; new serial → zone transfer
  • ; served at 17 locations

What you need Hidden Primary for

  • Keep your tools

    You keep maintaining the zone in your own system, with your scripts and your version control.

  • Our network answers

    Our nameservers at 17 locations answer queries for your domain, not your single server.

  • Your server stays hidden

    Your nameserver is in no delegation, so resolvers do not query it. Only we fetch the zone from it.

How you run Hidden Primary with us

  1. Enter the source

    In the customer area you enter your nameserver and allow the zone transfer there for the address we give you.

    Zone yourname.com

    Example
    • ; source: your nameserver
    • @SOA… 2026092301

  2. Raise the serial

    When you change the zone, you raise the serial number. We check it hourly and fetch the zone on a new one.

    Zone yourname.com

    Example
    • new: +@SOA… 2026092302
    • ; new serial → zone transfer

  3. Serve

    Our nameservers answer the queries at 17 locations. Our three nameservers stand at the apex.

    Zone yourname.com

    Example
    • @NSa.regfish-ns.net.
    • @NSb.regfish-ns.net.
    • @NSc.regfish-ns.net.
    • ; served at 17 locations

Scope of service

Price
Included in every domain, at no extra cost
Transfer
Zone transfer (AXFR) from your nameserver, allowed for the address the customer area names
Interval
Hourly; only a higher serial number is taken over
Takeover
In one step: an aborted transfer leaves the served zone unchanged
Nameservers at the apex
a., b. and c.regfish-ns.net, our own anycast network at 17 locations in 15 countries
Changes
Only on your nameserver; we replace the zone completely on every takeover

As of 29.09.2026.Evidence with source and date

For developers

Check what our network serves

The API and your AI agent read the zone as we took it over.

Read the zone
GET /dns/{domain}/rr
As a zone file
GET /dns/zones/{domain}/export
AI agent
https://api.regfish.com/mcp · get_dns_zone · check_dns_propagation
Read the API referenceSet up MCP
Claude Code
claude plugin marketplace add regfish/claude-pluginclaude plugin install regfish@regfishclaude mcp login plugin:regfish:regfish

Your AI agent then reads the zone with get_dns_zone, with the rights you give it.

Frequent questions

Do I need my own nameserver?

Yes. It is the source of the zone and must allow the zone transfer for the address the customer area names.

When is a change in your network?

We check the serial number once an hour. If it has gone up, we take the zone over on the next run.

Can I also change records in the customer area?

The zone comes from your nameserver. We replace it completely on every takeover, so change records there.

Hidden Primary comes with your domain

Search for your name. You set up Hidden Primary as soon as the domain is with us.

Included in every domain, at no extra cost

.de: €3.99 in the first year

€19.00 per additional year

All prices include 19 % German VAT.

Find a domainAlready a customer? Set up Hidden Primary