🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`replaceremotes.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:1325^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b8f3^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.19.37^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.243^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`kai.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bbc^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1bc^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kai.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21bc^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kai.ns.cloudflare.com`
		A	108.162.193.188^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	172.64.33.188^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	173.245.59.188^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
NS	`tia.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tia.ns.cloudflare.com`
		A	108.162.192.229^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.64.32.229^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	173.245.58.229^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
MX	`mx1.forwardemail.net` ⭐
		A	2604:a880:2:d0::306:1^{🇺🇸 DIGITALOCEAN2604:a880:2::/48 DigitalOcean}
			PTR	`mx1.forwardemail.net`
		A	2a02:6ea0:d71e::2^{🇺🇸 CDN772a02:6ea0:d700::/40 Denver IPv6}
			PTR	`mx1.forwardemail.net`
		A	121.127.44.56^{🇺🇸 CDN77121.127.44.0/24 Denver}
			PTR	`mx1.forwardemail.net`
		A	138.197.213.185^{🇺🇸 DIGITALOCEAN138.197.208.0/20 DigitalOcean}
			PTR	`mx1.forwardemail.net`
MX	`mx2.forwardemail.net` ⭐
		A	2604:a880:400:d1::cd:9001^{🇺🇸 DIGITALOCEAN2604:a880:400::/48 DigitalOcean}
			PTR	`mx2.forwardemail.net`
		A	2a02:6ea0:d71e::1^{🇺🇸 CDN772a02:6ea0:d700::/40 Denver IPv6}
			PTR	`mx2.forwardemail.net`
		A	104.248.224.170^{🇺🇸 DIGITALOCEAN104.248.224.0/20 DigitalOcean}
			PTR	`mx2.forwardemail.net`
		A	121.127.44.59^{🇺🇸 CDN77121.127.44.0/24 Denver}
			PTR	`mx2.forwardemail.net`
TXT	`forward-email-site-verification=RhUmzqRHWu`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.19.37, 172.67.184.243
		IPv6 hints	2606:4700:3032::6815:1325, 2606:4700:3036::ac43:b8f3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=135, name=cloudflare-ech.com
SOA	`kai.ns.cloudflare.com`dns@cloudflare.com serial=2414908375

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1791142784

Same first word

replaceremotes.com

Previous names

Next names

DNS History

18 records (8 active, 10 former)

○NSdns1.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

○NSdns2.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

○NSdns3.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

○NSdns4.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

○NSdns5.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

●NSkai.ns.cloudflare.com2026-09-06 → 2026-10-04 · 3 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
● 2026-10-04 19:55:04

●NStia.ns.cloudflare.com2026-09-06 → 2026-10-04 · 3 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
● 2026-10-04 19:55:04

●MXmx1.forwardemail.net2026-09-06 → 2026-10-04 · 2 obs

● 2026-09-06 22:19:16
● 2026-10-04 19:55:04

●MXmx2.forwardemail.net2026-09-06 → 2026-10-04 · 2 obs

● 2026-09-06 22:19:16
● 2026-10-04 19:55:04

●A104.21.19.372026-09-17 → 2026-10-04 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-10-04 19:55:04

●A172.67.184.2432026-09-17 → 2026-10-04 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-10-04 19:55:04

○A188.114.96.02026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-10-04 19:55:04

○A188.114.97.02026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-10-04 19:55:04

●A2606:4700:3032::6815:13252026-09-17 → 2026-10-04 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-10-04 19:55:04

●A2606:4700:3036::ac43:b8f32026-09-17 → 2026-10-04 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-10-04 19:55:04

○A2a06:98c1:3120::2026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-10-04 19:55:04

○A2a06:98c1:3121::2026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-10-04 19:55:04

○A54.187.254.832015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-10-04 19:55:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	d.gtld-servers.net, c.gtld-servers.net, m.gtld-servers.net, h.gtld-servers.net...	-
replaceremotes.com	tia.ns.cloudflare.com, kai.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.188

NS records: tia.ns.cloudflare.com, kai.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for replaceremotes.com (unsigned zone)

⏱️ Timing

Total: 259ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.184.243, 104.21.19.37`
AAAA	2	`2606:4700:3036::ac43:b8f3, 2606:4700:3032::6815:1325`
NS	2	`kai.ns.cloudflare.com, tia.ns.cloudflare.com`
MX	2	`mx1.forwardemail.net (pri: 10), mx2.forwardemail.net (pri: 10)`
TXT	1	`forward-email-site-verification=RhUmzqRH`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`kai.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (tia.ns.cloudflare.com, tia.ns.cloudflare.com, tia.ns.cloudflare.com...)

Analysis

IP Addresses

replaceremotes.com points to the four IP addresses 104.21.19.37, 172.67.184.243, 2606:4700:3032::6815:1325 and 2606:4700:3036::ac43:b8f3.

Two other host names, along with poolmother.click, balikini.id and albertahub.online, also share IP numbers with replaceremotes.com.

Name Servers

replaceremotes.com is served by two delegated name servers, kai.ns.cloudflare.com and tia.ns.cloudflare.com.

replaceremotes.com shares its NS records with other domains, for example installedaudio.com, pasrinimul.pages.dev, romantichujor.workers.dev and two others.

There is at least partial name server overlap between replaceremotes.com and other domains — ncmedios.com, awneoon.eu, funbypass.com and two more among them.

These name servers are routinely deployed together with the name servers pearl.ns.cloudflare.com.

DNS names with 6 IP addresses:

kai.ns.cloudflare.com carries IP addresses 108.162.193.188, 172.64.33.188 and 173.245.59.188, with 3 other addresses beyond those.

tia.ns.cloudflare.com carries IP addresses 108.162.192.229, 172.64.32.229 and 173.245.58.229, with 3 other addresses beyond those.

Mail Servers

replaceremotes.com is served by two mail servers, mx1.forwardemail.net and mx2.forwardemail.net.

Among the domains sharing a mail server setup with replaceremotes.com are famousgreyx.com, meamy.com, homefarmpoloevents.co.uk and two others.

There is at least a partial overlap in mail servers between replaceremotes.com and other domains like govapeshop.com, fmb-advocacia.com.br and tegovafrance.com.

Hosts mx1.forwardemail.net and mx2.forwardemail.net each point to four IP addresses: mx1.forwardemail.net resolves to 121.127.44.56, 138.197.213.185, 2604:a880:2:d0::306:1 and 2a02:6ea0:d71e::2, and mx2.forwardemail.net resolves to 104.248.224.170, 121.127.44.59, 2604:a880:400:d1::cd:9001 and 2a02:6ea0:d71e::1.

replaceremotes.com - robtex.com