🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`changekeeper.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:8975^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:30d1^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.48.209^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.137.117^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`etta.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a9c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c09c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`etta.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:209c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`etta.ns.cloudflare.com`
		A	108.162.192.156^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	172.64.32.156^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	173.245.58.156^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
NS	`terry.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bed^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ed^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`terry.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ed^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`terry.ns.cloudflare.com`
		A	108.162.193.237^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	172.64.33.237^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	173.245.59.237^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
MX	`fwd1.porkbun.com` ⭐
		A	44.226.226.6^{🇺🇸 Amazon44.224.0.0/11 EC2 PDX prefix}
			PTR	`fwd1.porkbun.com`
MX	`fwd2.porkbun.com`⁽²⁰⁾
		A	52.10.201.111^{🇺🇸 Amazon52.10.0.0/15 EC2 PDX Prefix}
			PTR	`fwd2.porkbun.com`
TXT	`v=spf1 include:_spf.porkbun.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.48.209, 172.67.137.117
		IPv6 hints	2606:4700:3030::ac43:8975, 2606:4700:3036::6815:30d1
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=16, name=cloudflare-ech.com
SOA	`etta.ns.cloudflare.com`dns@cloudflare.com serial=2415200692

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

changekeeper.care

changekeeper.com

changekeeper.dev

changekeeper.ai

Previous names

Next names

DNS History

13 records (8 active, 5 former)

○NScuritiba.ns.porkbun.com2026-08-29 → 2026-08-29 · 3 obs

● 2026-08-29 07:18:36
○ 2026-09-29 07:02:32
○ 2026-10-24 11:22:16

●NSetta.ns.cloudflare.com2026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

○NSfortaleza.ns.porkbun.com2026-08-29 → 2026-08-29 · 3 obs

● 2026-08-29 07:18:36
○ 2026-09-29 07:02:32
○ 2026-10-24 11:22:16

○NSmaceio.ns.porkbun.com2026-08-29 → 2026-08-29 · 3 obs

● 2026-08-29 07:18:36
○ 2026-09-29 07:02:32
○ 2026-10-24 11:22:16

○NSsalvador.ns.porkbun.com2026-08-29 → 2026-08-29 · 3 obs

● 2026-08-29 07:18:36
○ 2026-09-29 07:02:32
○ 2026-10-24 11:22:16

●NSterry.ns.cloudflare.com2026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

●MXfwd1.porkbun.com2026-08-29 → 2026-10-24 · 2 obs

● 2026-08-29 07:18:36
● 2026-10-24 11:22:16

●MXfwd2.porkbun.com2026-08-29 → 2026-10-24 · 2 obs

● 2026-08-29 07:18:36
● 2026-10-24 11:22:16

●A104.21.48.2092026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

●A172.67.137.1172026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

○A216.198.79.12026-08-29 → 2026-08-29 · 3 obs

● 2026-08-29 07:18:36
○ 2026-09-29 07:02:32
○ 2026-10-24 11:22:16

●A2606:4700:3030::ac43:89752026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

●A2606:4700:3036::6815:30d12026-09-29 → 2026-10-24 · 3 obs

○ 2026-08-29 07:18:36
● 2026-09-29 07:02:32
● 2026-10-24 11:22:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld3.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com...	-
changekeeper.dev	etta.ns.cloudflare.com, terry.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.156

NS records: etta.ns.cloudflare.com, terry.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for changekeeper.dev (unsigned zone)

⏱️ Timing

Total: 1340ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.137.117, 104.21.48.209`
AAAA	2	`2606:4700:3030::ac43:8975, 2606:4700:3036::6815:30d1`
NS	2	`etta.ns.cloudflare.com, terry.ns.cloudflare.com`
MX	2	`fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)`
TXT	1	`v=spf1 include:_spf.porkbun.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`etta.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

changekeeper.dev has four IP addresses: 104.21.48.209, 172.67.137.117, 2606:4700:3030::ac43:8975 and 2606:4700:3036::6815:30d1.

vesna-photo.com, adelspote.dk, www.psp-prom.ru and two other host names share IP numbers with changekeeper.dev.

Name Servers

changekeeper.dev is served by two delegated name servers, etta.ns.cloudflare.com and terry.ns.cloudflare.com.

changekeeper.dev uses the same name servers as several other domains — among them muulol.pages.dev, mawabidn.pages.dev, 123moviess.website and two more.

changekeeper.dev partially shares its NS delegation with several other domains, including garymatzner.com, trixcasino-se.com, shop1dollar.com and two others.

It is common to find these name servers alongside the name servers arvind.ns.cloudflare.com, albert.ns.cloudflare.com, woz.ns.cloudflare.com and two others.

Hostnames that resolve to 6 IP addresses:

etta.ns.cloudflare.com carries IP addresses 108.162.192.156, 172.64.32.156 and 173.245.58.156, with 3 other addresses beyond those.

terry.ns.cloudflare.com carries IP addresses 108.162.193.237, 172.64.33.237 and 173.245.59.237, with 3 other addresses beyond those.

Mail Servers

Mail for changekeeper.dev is handled by two mail servers — fwd1.porkbun.com and fwd2.porkbun.com.

changekeeper.dev uses an identical mail server configuration to several other domains — among them russellsoftworks.com, bennetthollstein.de, mydaimoku.com and two more.

At least a portion of changekeeper.dev's mail servers are also used by other domains, for example 10nights.london.

fwd1.porkbun.com resolves to 44.226.226.6. fwd2.porkbun.com resolves to 52.10.201.111. Both host names point to a single IP number.

changekeeper.dev - robtex.com