🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`runsheet.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:482^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:8419^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.4.130^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.132.25^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`april.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a42^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`april.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c042^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`april.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2042^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`april.ns.cloudflare.com`
		A	108.162.192.66^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`april.ns.cloudflare.com`
		A	172.64.32.66^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`april.ns.cloudflare.com`
		A	173.245.58.66^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`april.ns.cloudflare.com`
NS	`yoxall.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c2f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`yoxall.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c32f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`yoxall.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:232f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`yoxall.ns.cloudflare.com`
		A	108.162.195.47^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`yoxall.ns.cloudflare.com`
		A	162.159.44.47^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`yoxall.ns.cloudflare.com`
		A	172.64.35.47^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`yoxall.ns.cloudflare.com`
MX	`mx1.simplelogin.co` ⭐
		A	176.119.200.136^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mx1.simplelogin.co`
			PTR	`mx2.simplelogin.co`
		A	185.205.70.136^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mx1.simplelogin.co`
			PTR	`mx2.simplelogin.co`
MX	`mx2.simplelogin.co`⁽²⁰⁾
		A	176.119.200.136^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mx1.simplelogin.co`
			PTR	`mx2.simplelogin.co`
		A	185.205.70.136^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mx1.simplelogin.co`
			PTR	`mx2.simplelogin.co`
TXT	`sl-verification=ukbtsewdkqesifenwqebwwqmpqzpma`
TXT	`v=spf1 include:simplelogin.co ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.4.130, 172.67.132.25
		IPv6 hints	2606:4700:3032::6815:482, 2606:4700:3034::ac43:8419
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=70, name=cloudflare-ech.com
SOA	`april.ns.cloudflare.com`dns@cloudflare.com serial=2412516204

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

runsheet.show

runsheet.land

runsheet.run

runsheet.net

runsheet.com.au

runsheet.tech

runsheet.com

runsheet.website

runsheet.us

runsheet.dev

Similar names

Previous names

Next names

DNS History

12 records (8 active, 4 former)

●NSapril.ns.cloudflare.com2026-08-25 → 2026-08-26 · 2 obs

● 2026-08-25 22:55:36
● 2026-08-26 18:39:14

●NSyoxall.ns.cloudflare.com2026-08-25 → 2026-08-26 · 2 obs

● 2026-08-25 22:55:36
● 2026-08-26 18:39:14

●MXmx1.simplelogin.co2026-08-25 → 2026-08-26 · 2 obs

● 2026-08-25 22:55:36
● 2026-08-26 18:39:14

●MXmx2.simplelogin.co2026-08-25 → 2026-08-26 · 2 obs

● 2026-08-25 22:55:36
● 2026-08-26 18:39:14

●A104.21.4.1302026-08-26 → 2026-08-26 · 3 obs

○ 2026-08-25 22:55:36
● 2026-08-26 15:30:16
● 2026-08-26 18:39:14

●A172.67.132.252026-08-26 → 2026-08-26 · 3 obs

○ 2026-08-25 22:55:36
● 2026-08-26 15:30:16
● 2026-08-26 18:39:14

○A188.114.96.02026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:55:36
○ 2026-08-26 15:30:16
○ 2026-08-26 18:39:14

○A188.114.97.02026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:55:36
○ 2026-08-26 15:30:16
○ 2026-08-26 18:39:14

●A2606:4700:3032::6815:4822026-08-26 → 2026-08-26 · 3 obs

○ 2026-08-25 22:55:36
● 2026-08-26 15:30:16
● 2026-08-26 18:39:14

●A2606:4700:3034::ac43:84192026-08-26 → 2026-08-26 · 3 obs

○ 2026-08-25 22:55:36
● 2026-08-26 15:30:16
● 2026-08-26 18:39:14

○A2a06:98c1:3120::2026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:55:36
○ 2026-08-26 15:30:16
○ 2026-08-26 18:39:14

○A2a06:98c1:3121::2026-08-25 → 2026-08-25 · 3 obs

● 2026-08-25 22:55:36
○ 2026-08-26 15:30:16
○ 2026-08-26 18:39:14

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	-
runsheet.dev	yoxall.ns.cloudflare.com, april.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.66

NS records: yoxall.ns.cloudflare.com, april.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for runsheet.dev (unsigned zone)

⏱️ Timing

Total: 818ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.4.130, 172.67.132.25`
AAAA	2	`2606:4700:3034::ac43:8419, 2606:4700:3032::6815:482`
NS	2	`april.ns.cloudflare.com, yoxall.ns.cloudflare.com`
MX	2	`mx1.simplelogin.co (pri: 10), mx2.simplelogin.co (pri: 20)`
TXT	2	`sl-verification=ukbtsewdkqesifenwqebwwqm, v=spf1 include:simplelogin.co ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`april.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

runsheet.dev has four IP addresses: 104.21.4.130, 172.67.132.25, 2606:4700:3032::6815:482 and 2606:4700:3034::ac43:8419.

Two other host names, along with zjjianyue.com, kavbet1288.com and casino93053.website, also share IP numbers with runsheet.dev.

Name Servers

runsheet.dev is served by two delegated name servers, april.ns.cloudflare.com and yoxall.ns.cloudflare.com.

runsheet.dev shares its NS records with other domains, for example ruiegr.lol, nw-8tr.pages.dev, clmnt-pchrls.workers.dev and two others.

runsheet.dev shares at least some of its name servers with other domains, including nova24web.icu, news4neighbors.net, utahtrauma.org and two others.

These name servers are frequently paired with the name servers vick.ns.cloudflare.com and justin.ns.cloudflare.com.

DNS names with 6 IP addresses:

april.ns.cloudflare.com carries IP addresses 108.162.192.66, 172.64.32.66 and 173.245.58.66, with 3 other addresses beyond those.

yoxall.ns.cloudflare.com carries IP addresses 108.162.195.47, 162.159.44.47 and 172.64.35.47, with 3 other addresses beyond those.

Mail Servers

runsheet.dev is served by two mail servers, mx1.simplelogin.co and mx2.simplelogin.co.

Among the domains sharing a mail server setup with runsheet.dev are aliasdmn.com, hypercoin.network, legeny.net and two others.

The host names mx1.simplelogin.co and mx2.simplelogin.co both direct to 176.119.200.136 and 185.205.70.136.

These two host names — mx1.simplelogin.co and mx2.simplelogin.co — each point to 176.119.200.136 IP addresses.

These two host names — mx1.simplelogin.co and mx2.simplelogin.co — each point to 185.205.70.136 IP addresses.

runsheet.dev - robtex.com

runsheet.dev

dev

Same first word

Similar names

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`runsheet.dev`

`dev`