forgery.dev - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

forgery.dev

DNSSEC⚠️ Not signed
A207.207.210.23
A207.207.210.36
A207.207.210.50
NScuritiba.ns.porkbun.com ⭐
A2400:cb00:2049:1::adf5:3a25πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A173.245.58.37πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSfortaleza.ns.porkbun.com
A2400:cb00:2049:1::a29f:88cπŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.8.140Cloudflare162.159.8.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSmaceio.ns.porkbun.com
A2400:cb00:2049:1::a29f:bb4πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.11.180Cloudflare162.159.11.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSsalvador.ns.porkbun.com
A2400:cb00:2049:1::a29f:a96πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.10.150Cloudflare162.159.10.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXfwd1.porkbun.com ⭐
A44.226.226.6πŸ‡ΊπŸ‡Έ Amazon44.224.0.0/11 EC2 PDX prefix
PTRfwd1.porkbun.com
MXfwd2.porkbun.com(20)
A52.10.201.111πŸ‡ΊπŸ‡Έ Amazon52.10.0.0/15 EC2 PDX Prefix
PTRfwd2.porkbun.com
TXTgoogle-site-verification=H3q92YDoYaYWCniIch3vwc7WC6x7QtUwpJFzLxCezNQ
TXTv=spf1 include:_spf.porkbun.com ~all
SOAcuritiba.ns.porkbun.comdns@cloudflare.com serial=2413465708

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

9 records (9 active, 0 former)

NScuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.comMXfwd1.porkbun.comfwd2.porkbun.comA207.207.210.23207.207.210.36207.207.210.50
●NScuritiba.ns.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●NSfortaleza.ns.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●NSmaceio.ns.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●NSsalvador.ns.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●MXfwd1.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●MXfwd2.porkbun.com2026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●A207.207.210.232026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●A207.207.210.362026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44
●A207.207.210.502026-09-05 β†’ 2026-09-06 Β· 2 obs
● 2026-09-05 02:03:22
● 2026-09-06 00:17:44

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...-
forgery.devsalvador.ns.porkbun.com, curitiba.ns.porkbun.com, maceio.ns.porkbun.com, fortaleza.ns.porkbun.com-

βœ… Authoritative Response

Server:162.159.10.150

NS records: salvador.ns.porkbun.com, curitiba.ns.porkbun.com, maceio.ns.porkbun.com, fortaleza.ns.porkbun.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for forgery.dev (unsigned zone)

⏱️ Timing

Total: 692ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A3207.207.210.23, 207.207.210.36...
NS4curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com...
MX2fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)
TXT2google-site-verification=H3q92YDoYaYWCni, v=spf1 include:_spf.porkbun.com ~all
SOA1curitiba.ns.porkbun.com dns.cloudflare.c

Analysis

IP Addresses

forgery.dev points to three IP numbers, namely 207.207.210.23, 207.207.210.36 and 207.207.210.50.

Two other host names, along with tacostormstudios.com, madebyasiya.com and ransomcarta.com, also share IP numbers with forgery.dev.

Name Servers

The NS records for forgery.dev point to four name servers: curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com.

At least some of forgery.dev's name servers are shared with other domains, for example merchnewheights.shop, helloai.media, portflow.io and two more.

Four hostnames, each resolving to a pair of IP addresses: curitiba.ns.porkbun.com directs to 173.245.58.37 and 2400:cb00:2049:1::adf5:3a25; fortaleza.ns.porkbun.com directs to 162.159.8.140 and 2400:cb00:2049:1::a29f:88c; maceio.ns.porkbun.com directs to 162.159.11.180 and 2400:cb00:2049:1::a29f:bb4; salvador.ns.porkbun.com directs to 162.159.10.150 and 2400:cb00:2049:1::a29f:a96.

Mail Servers

forgery.dev is served by two mail servers, fwd1.porkbun.com and fwd2.porkbun.com.

Among the domains sharing a mail server setup with forgery.dev are kesore.com, runezra.com, mygoatherd.com and two others.

At least some of forgery.dev's mail servers are shared with other domains, among them newtechniques.com, brainjuice360.com and simplesoftwareapps.com.

Each of fwd1.porkbun.com and fwd2.porkbun.com has one IP address: fwd1.porkbun.com uses 44.226.226.6 and fwd2.porkbun.com uses 52.10.201.111.