🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`subsurface.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:b863^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:2048^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.32.72^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.99^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`liberty.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26f0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`liberty.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2f0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`liberty.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22f0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`liberty.ns.cloudflare.com`
		A	108.162.194.240^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`liberty.ns.cloudflare.com`
		A	162.159.38.240^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`liberty.ns.cloudflare.com`
		A	172.64.34.240^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`liberty.ns.cloudflare.com`
NS	`ricardo.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cd3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3d3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ricardo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23d3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ricardo.ns.cloudflare.com`
		A	108.162.195.211^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	162.159.44.211^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	172.64.35.211^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
MX	`mx2.zoho.com` ⭐
		A	204.141.33.44^{🇺🇸 ZohoAS204.141.32.0/23 PNAP-DAL CASE00103239}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx3.zoho.com`⁽²⁰⁾
		A	204.141.43.44^{🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx.zoho.com`⁽³⁰⁾
		A	136.143.183.44^{🇺🇸 ZohoAS136.143.182.0/23 Zoho}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
		A	204.141.43.44^{🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
TXT	`google-site-verification=aSWdLonER4WBc5jf8HKWWo_FwGRtwxByRIDECuMUjGk`
TXT	`v=spf1 include:zoho.com ~all`
TXT	`zoho-verification=zb30849818.zmverify.zoho.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.32.72, 172.67.184.99
		IPv6 hints	2606:4700:3031::ac43:b863, 2606:4700:3037::6815:2048
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=144, name=cloudflare-ech.com
SOA	`liberty.ns.cloudflare.com`dns@cloudflare.com serial=2412559760

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

Similar names

surfaceusb.com

Previous names

Next names

DNS History

9 records (9 active, 0 former)

●NSliberty.ns.cloudflare.com2026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●NSricardo.ns.cloudflare.com2026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●MXmx.zoho.com2026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●MXmx2.zoho.com2026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●MXmx3.zoho.com2026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●A104.21.32.722026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●A172.67.184.992026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●A2606:4700:3031::ac43:b8632026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

●A2606:4700:3037::6815:20482026-08-28 → 2026-09-01 · 2 obs

● 2026-08-28 17:41:48
● 2026-09-01 13:18:56

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com...	-
subsurface.dev	ricardo.ns.cloudflare.com, liberty.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.240

NS records: ricardo.ns.cloudflare.com, liberty.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for subsurface.dev (unsigned zone)

⏱️ Timing

Total: 535ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.184.99, 104.21.32.72`
AAAA	2	`2606:4700:3037::6815:2048, 2606:4700:3031::ac43:b863`
NS	2	`liberty.ns.cloudflare.com, ricardo.ns.cloudflare.com`
MX	3	`mx.zoho.com (pri: 10), mx2.zoho.com (pri: 20)...`
TXT	3	`google-site-verification=aSWdLonER4WBc5j, v=spf1 include:zoho.com ~all...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`liberty.ns.cloudflare.com dns.cloudflare`

Analysis

IP Addresses

subsurface.dev resolves to four IP addresses: 104.21.32.72, 172.67.184.99, 2606:4700:3031::ac43:b863 and 2606:4700:3037::6815:2048.

pottconservation.com, nebulor.com, mydigicam.net and two other host names share IP numbers with subsurface.dev.

Name Servers

DNS delegation for subsurface.dev points to two name servers: liberty.ns.cloudflare.com and ricardo.ns.cloudflare.com.

subsurface.dev uses the same name servers as several other domains — among them georgiahibachi.com, test-test-test123123.pages.dev, hsmsoipa.com and two more.

subsurface.dev shares at least some of its name servers with other domains, including luisazhou.com, thinkr.ro, pcyberpapa.workers.dev and two others.

These name servers are frequently paired with the name servers chip.ns.cloudflare.com and sunny.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

liberty.ns.cloudflare.com has IP addresses 108.162.194.240, 162.159.38.240 and 172.64.34.240, plus 3 other.

ricardo.ns.cloudflare.com has IP addresses 108.162.195.211, 162.159.44.211 and 172.64.35.211, plus 3 other.

Mail Servers

subsurface.dev is handled by three mail servers: mx2.zoho.com, mx3.zoho.com and mx.zoho.com.

subsurface.dev has at least partial mail server overlap with other domains such as nodusautomations.co.za, finesse.in, nonmommymakeover.com and two more.

Hostnames that resolve to two IP addresses:

mx.zoho.com has two IP addresses: 136.143.183.44 and 204.141.43.44.

Hosts with just one IP address:

mx2.zoho.com directs to 204.141.33.44.

mx3.zoho.com directs to 204.141.43.44.

Host names pointing to 204.141.43.44 IP addresses: mx.zoho.com and mx3.zoho.com.

subsurface.dev - robtex.com

subsurface.dev

dev

Same first word

Similar names

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`subsurface.dev`

`dev`