`darkchange.app`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:37ae^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:abc8^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.55.174^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.171.200^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`aria.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a44^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aria.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c044^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aria.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2044^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aria.ns.cloudflare.com`
		A	108.162.192.68^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aria.ns.cloudflare.com`
		A	172.64.32.68^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aria.ns.cloudflare.com`
		A	173.245.58.68^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aria.ns.cloudflare.com`
NS	`todd.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b92^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`todd.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c192^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`todd.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2192^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`todd.ns.cloudflare.com`
		A	108.162.193.146^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`todd.ns.cloudflare.com`
		A	172.64.33.146^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`todd.ns.cloudflare.com`
		A	173.245.59.146^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`todd.ns.cloudflare.com`
MX	`route3.mx.cloudflare.net` ⭐
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
MX	`route2.mx.cloudflare.net`⁽²⁷⁾
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
MX	`route1.mx.cloudflare.net`⁽²⁸⁾
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.55.174, 172.67.171.200
		IPv6 hints	2606:4700:3032::6815:37ae, 2606:4700:3036::ac43:abc8
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=212, name=cloudflare-ech.com
SOA	`aria.ns.cloudflare.com`dns@cloudflare.com serial=2406973730

`app`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=101427

⚠️ On DNS blocklist: tif
🔒 HSTS Preload (+subdomains)

Same first word

darkchange.net

darkchange.io

darkchange.app

Similar names

hackgarden.com

DNS History

15 records (9 active, 6 former)

●NSaria.ns.cloudflare.com2026-04-05 → 2026-07-19 · 2 obs

● 2026-04-05 08:22:36
● 2026-07-19 03:05:58

●NStodd.ns.cloudflare.com2026-04-05 → 2026-07-19 · 2 obs

● 2026-04-05 08:22:36
● 2026-07-19 03:05:58

●MXroute1.mx.cloudflare.net2026-04-05 → 2026-07-19 · 2 obs

● 2026-04-05 08:22:36
● 2026-07-19 03:05:58

●MXroute2.mx.cloudflare.net2026-04-05 → 2026-07-19 · 2 obs

● 2026-04-05 08:22:36
● 2026-07-19 03:05:58

●MXroute3.mx.cloudflare.net2026-04-05 → 2026-07-19 · 2 obs

● 2026-04-05 08:22:36
● 2026-07-19 03:05:58

●A104.21.55.1742026-04-05 → 2026-07-19 · 5 obs

● 2026-04-05 08:22:36
● 2026-05-12 20:12:24
○ 2026-06-15 10:34:22
● 2026-07-09 12:56:32
● 2026-07-19 03:05:58

●A172.67.171.2002026-04-05 → 2026-07-19 · 5 obs

● 2026-04-05 08:22:36
● 2026-05-12 20:12:24
○ 2026-06-15 10:34:22
● 2026-07-09 12:56:32
● 2026-07-19 03:05:58

○A188.114.96.02026-06-15 → 2026-06-15 · 4 obs

○ 2026-05-12 20:12:24
● 2026-06-15 10:34:22
○ 2026-07-09 12:56:32
○ 2026-07-19 03:05:58

○A188.114.97.02026-06-15 → 2026-06-15 · 4 obs

○ 2026-05-12 20:12:24
● 2026-06-15 10:34:22
○ 2026-07-09 12:56:32
○ 2026-07-19 03:05:58

●A2606:4700:3032::6815:37ae2026-07-09 → 2026-07-19 · 3 obs

○ 2026-06-15 10:34:22
● 2026-07-09 12:56:32
● 2026-07-19 03:05:58

○A2606:4700:3033::ac43:abc82026-04-05 → 2026-05-12 · 4 obs

● 2026-04-05 08:22:36
● 2026-05-12 20:12:24
○ 2026-06-15 10:34:22
○ 2026-07-19 03:05:58

○A2606:4700:3036::6815:37ae2026-04-05 → 2026-05-12 · 4 obs

● 2026-04-05 08:22:36
● 2026-05-12 20:12:24
○ 2026-06-15 10:34:22
○ 2026-07-19 03:05:58

●A2606:4700:3036::ac43:abc82026-07-09 → 2026-07-19 · 3 obs

○ 2026-06-15 10:34:22
● 2026-07-09 12:56:32
● 2026-07-19 03:05:58

○A2a06:98c1:3120::2026-06-15 → 2026-06-15 · 4 obs

○ 2026-05-12 20:12:24
● 2026-06-15 10:34:22
○ 2026-07-09 12:56:32
○ 2026-07-19 03:05:58

○A2a06:98c1:3121::2026-06-15 → 2026-06-15 · 4 obs

○ 2026-05-12 20:12:24
● 2026-06-15 10:34:22
○ 2026-07-09 12:56:32
○ 2026-07-19 03:05:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
app	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	-
darkchange.app	aria.ns.cloudflare.com, todd.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.146

NS records: aria.ns.cloudflare.com, todd.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for darkchange.app (unsigned zone)

⏱️ Timing

Total: 6174ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.171.200, 104.21.55.174`
AAAA	2	`2606:4700:3032::6815:37ae, 2606:4700:3036::ac43:abc8`
NS	2	`aria.ns.cloudflare.com, todd.ns.cloudflare.com`
MX	3	`route3.mx.cloudflare.net (pri: 26), route2.mx.cloudflare.net (pri: 27)...`
TXT	1	`v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aria.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

darkchange.app directs to four IP numbers, which are 104.21.55.174, 172.67.171.200, 2606:4700:3032::6815:37ae and 2606:4700:3036::ac43:abc8.

Among the host names that share IP numbers with darkchange.app are www.molyneux-estateagents.co.uk, www.trees86.com, wisebrightmod-ule.click and two others.

Name Servers

darkchange.app has two authoritative name servers — aria.ns.cloudflare.com and todd.ns.cloudflare.com.

darkchange.app has the same name server delegation as a number of other domains, such as malgoswap.io, varekuta.top, darkchange.io and two more.

There is at least partial name server overlap between darkchange.app and other domains — thesushiboys.com, teamelectrical.com.au, unimhk.com and two more among them.

These name servers are routinely deployed together with the name servers kim.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

aria.ns.cloudflare.com points to 108.162.192.68, 172.64.32.68, 173.245.58.68 and 3 other IP addresses.

todd.ns.cloudflare.com points to 108.162.193.146, 172.64.33.146, 173.245.59.146 and 3 other IP addresses.

Mail Servers

Incoming mail for darkchange.app is delivered via three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

darkchange.app shares at least some of its mail servers with other domains — for example planetebooksvault.com, mail.mpg.vn, hslocksmithsoc.com and two more.

Host names resolving to 6 IP numbers:

route1.mx.cloudflare.net points to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 other IP addresses.

route2.mx.cloudflare.net points to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 other IP addresses.

route3.mx.cloudflare.net points to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 other IP addresses.

darkchange.app - robtex.com

darkchange.app

app

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`darkchange.app`

`app`