🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`searchreplaceplugin.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:9c7^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:bd8c^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.9.199^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.189.140^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`keaton.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cb5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keaton.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3b5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`keaton.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23b5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`keaton.ns.cloudflare.com`
		A	108.162.195.181^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keaton.ns.cloudflare.com`
		A	162.159.44.181^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keaton.ns.cloudflare.com`
		A	172.64.35.181^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`keaton.ns.cloudflare.com`
NS	`ligia.ns.cloudflare.com`
		A	2606:4700:50::a29f:2604^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ligia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c204^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ligia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2204^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ligia.ns.cloudflare.com`
		A	108.162.194.4^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ligia.ns.cloudflare.com`
		A	162.159.38.4^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ligia.ns.cloudflare.com`
		A	172.64.34.4^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ligia.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c19::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`bk-in-f26.1e100.net`
		A	192.178.155.26^{🇺🇸 Google192.178.155.0/24}
			PTR	`yuiadrs-in-f26.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c14::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	192.178.234.27^{🇺🇸 Google192.178.0.0/15}
			PTR	`ncsclj-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.27^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f27.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.27^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f27.1e100.net`
TXT	`google-site-verification=4slJuTVKp5nfdsCx8IYhcExu7FsGUkNdHbcVA_A3zO0`
TXT	`google-site-verification=fpkc1pjaQPP5TLpPvBT4iflVNs_T87CgFiz4swLE70g`
TXT	`v=spf1 include:_spf.google.com ~all`
HTTPS	HTTP/2 ✓ hints match
		IPv4 hints	104.21.9.199, 172.67.189.140
		IPv6 hints	2606:4700:3030::6815:9c7, 2606:4700:3036::ac43:bd8c
SOA	`keaton.ns.cloudflare.com`dns@cloudflare.com serial=2416337901

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1791368429

Same first word

searchreplaceplugin.com

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSkeaton.ns.cloudflare.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●NSligia.ns.cloudflare.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●MXalt1.aspmx.l.google.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●MXalt2.aspmx.l.google.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●MXalt3.aspmx.l.google.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●MXalt4.aspmx.l.google.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●MXaspmx.l.google.com2026-09-14 → 2026-10-07 · 2 obs

● 2026-09-14 01:04:58
● 2026-10-07 10:48:20

●A104.21.9.1992026-09-26 → 2026-10-07 · 3 obs

○ 2026-09-14 01:04:58
● 2026-09-26 09:32:12
● 2026-10-07 10:48:20

●A172.67.189.1402026-09-26 → 2026-10-07 · 3 obs

○ 2026-09-14 01:04:58
● 2026-09-26 09:32:12
● 2026-10-07 10:48:20

○A188.114.96.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 01:04:58
○ 2026-09-26 09:32:12
○ 2026-10-07 10:48:20

○A188.114.97.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 01:04:58
○ 2026-09-26 09:32:12
○ 2026-10-07 10:48:20

●A2606:4700:3030::6815:9c72026-09-26 → 2026-10-07 · 3 obs

○ 2026-09-14 01:04:58
● 2026-09-26 09:32:12
● 2026-10-07 10:48:20

●A2606:4700:3036::ac43:bd8c2026-09-26 → 2026-10-07 · 3 obs

○ 2026-09-14 01:04:58
● 2026-09-26 09:32:12
● 2026-10-07 10:48:20

○A2a06:98c1:3120::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 01:04:58
○ 2026-09-26 09:32:12
○ 2026-10-07 10:48:20

○A2a06:98c1:3121::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 01:04:58
○ 2026-09-26 09:32:12
○ 2026-10-07 10:48:20

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net, c.gtld-servers.net...	-
searchreplaceplugin.com	ligia.ns.cloudflare.com, keaton.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.181

NS records: ligia.ns.cloudflare.com, keaton.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for searchreplaceplugin.com (unsigned zone)

⏱️ Timing

Total: 235ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.189.140, 104.21.9.199`
AAAA	2	`2606:4700:3036::ac43:bd8c, 2606:4700:3030::6815:9c7`
NS	2	`keaton.ns.cloudflare.com, ligia.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	3	`google-site-verification=4slJuTVKp5nfdsC, google-site-verification=fpkc1pjaQPP5TLp...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h2"]`
SOA	1	`keaton.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ligia.ns.cloudflare.com, ligia.ns.cloudflare.com, ligia.ns.cloudflare.com...)

Analysis

IP Addresses

searchreplaceplugin.com points to the four IP addresses 104.21.9.199, 172.67.189.140, 2606:4700:3030::6815:9c7 and 2606:4700:3036::ac43:bd8c.

Two other host names, along with meadowgstara(0x736578).shop, askust.com and katze.cat, also share IP numbers with searchreplaceplugin.com.

Name Servers

searchreplaceplugin.com uses two name servers for its delegation: keaton.ns.cloudflare.com and ligia.ns.cloudflare.com.

searchreplaceplugin.com shares its NS records with other domains, for example jili.host, king1jl12.com, www-plxy-google.com and two others.

At least some of searchreplaceplugin.com's name servers are shared with other domains, for example aisberg48.ru, gambizvethauci.workers.dev, soft-credit-c094.workers.dev and two more.

It is common for these name servers to be used in conjunction with the name servers irma.ns.cloudflare.com, cecelia.ns.cloudflare.com and oaklyn.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname keaton.ns.cloudflare.com directs to 108.162.195.181, 162.159.44.181 and 172.64.35.181 along with 3 other IP addresses.

Hostname ligia.ns.cloudflare.com directs to 108.162.194.4, 162.159.38.4 and 172.64.34.4 along with 3 other IP addresses.

Mail Servers

searchreplaceplugin.com has five mail servers, which are aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between searchreplaceplugin.com and other domains, including hashtagsea.com, bpta.es, solidtheater.com and two others.

alt4.aspmx.l.google.com, alt3.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com are mail servers that frequently appear together with these mail servers.

Host names that have two IP addresses:

aspmx.l.google.com directs traffic to 192.178.155.26 and 2607:f8b0:4004:c19::1a.

alt1.aspmx.l.google.com directs traffic to 192.178.234.27 and 2800:3f0:4003:c14::1b.

alt2.aspmx.l.google.com directs traffic to 172.253.116.27 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com directs traffic to 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com directs traffic to 172.253.157.27 and 2a00:1450:400c:c23::1b.