Domain and DNS Migration

Workflow

Export and inventory current DNS records, TTLs, proxy states and dependencies before modification.
Identify web, email, verification, DKIM, SPF, DMARC, API and subdomain dependencies separately.
Lower TTL ahead of planned cutover when timing allows.
Prepare and test the new origin/service before changing authoritative traffic.
Change the smallest record set needed and preserve rollback values exactly.
Verify DNS from multiple resolvers plus HTTP/TLS, mail authentication and application behavior.
Keep the old service available until propagation and critical-path validation complete.

Never rewrite SPF/DKIM/DMARC or delete unknown verification records during a web-only migration without proving they are obsolete.