changesync.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`changesync.com`

DNSSEC	⚠️ Not signed
A	198.202.211.1^{🇺🇸 CLOUDFLARESPECTRUM198.202.211.0/24 Webflow}
NS	`dean.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b99^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dean.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c199^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dean.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2199^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dean.ns.cloudflare.com`
		A	108.162.193.153^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.64.33.153^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	173.245.59.153^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
NS	`tori.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tori.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tori.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tori.ns.cloudflare.com`
		A	108.162.192.231^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tori.ns.cloudflare.com`
		A	172.64.32.231^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tori.ns.cloudflare.com`
		A	173.245.58.231^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tori.ns.cloudflare.com`
MX	`changesync-com.mail.protection.outlook.com` ⭐
		A	2a01:111:f403:c803::b^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn3pr0301cu00103.inbound.protection.outlook.com`
		A	2a01:111:f403:f908::8^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bnypr05cu00100.inbound.protection.outlook.com`
		A	2a01:111:f403:f909::^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn6pr04cu00200.inbound.protection.outlook.com`
		A	2a01:111:f403:f909::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn0pr02cu00301.inbound.protection.outlook.com`
		A	52.101.9.34^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-bl0pr03cu00402.inbound.protection.outlook.com`
		A	52.101.50.13^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-mw2pr02cu00605.inbound.protection.outlook.com`
		A	52.101.202.150^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-ph6pr04cu00106.inbound.protection.outlook.com`
		A	52.101.202.159^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-ph5pr04cu00107.inbound.protection.outlook.com`
MX	`mx1-us1.ppe-hosted.com`⁽¹⁰⁾
		A	67.231.154.162^{🇺🇸 Proofpoint67.231.154.0/24 Inc.}
			PTR	`mx1-us1.ppe-hosted.com`
		A	148.163.129.50^{🇺🇸 AS13916148.163.129.0/24 Proofpoint Inc.}
			PTR	`mx1-us1.ppe-hosted.com`
MX	`mx2-us1.ppe-hosted.com`⁽²⁰⁾
		A	67.231.154.163^{🇺🇸 Proofpoint67.231.154.0/24 Inc.}
			PTR	`mx2-us1.ppe-hosted.com`
		A	148.163.129.51^{🇺🇸 AS13916148.163.129.0/24 Proofpoint Inc.}
			PTR	`mx2-us1.ppe-hosted.com`
TXT	`MS=ms14153232`
TXT	`brevo-code:6e346bae65be9a05073b9d41cc0b08d8`
TXT	`google-site-verification=HVyCeg6bIyT4Y8KVDK9Tep1FKWAu7SHU6TZu72o0ewE`
TXT	`google-site-verification=aQz7e2v-qg3uisS61-UWgwDceuOVZdqKV9QbmGHbWqE`
TXT	`v=spf1 a:dispatch-us.ppe-hosted.com include:secureserver.net -all`
SOA	`dean.ns.cloudflare.com`dns@cloudflare.com serial=2418663274

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1794312591

Subdomains

admin-gophish.changesync.com

Same first word

changesync.xyz

changesync.workers.dev

changesync.com

Similar names

csyangchen.com

scchenyang.com

syncchange.xyz

chenyangsc.cn

Previous names

Next names

DNS History

11 records (6 active, 5 former)

●NSdean.ns.cloudflare.com2026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

○NSns31.domaincontrol.com2017-03-13 → 2017-03-13 · 3 obs

● 2017-03-13 19:51:04
○ 2026-08-29 23:41:00
○ 2026-11-10 12:28:26

○NSns32.domaincontrol.com2017-03-13 → 2017-03-13 · 3 obs

● 2017-03-13 19:51:04
○ 2026-08-29 23:41:00
○ 2026-11-10 12:28:26

●NStori.ns.cloudflare.com2026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

●MXchangesync-com.mail.protection.outlook.com2026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

○MXmailstore1.secureserver.net2017-03-13 → 2017-03-13 · 3 obs

● 2017-03-13 19:51:04
○ 2026-08-29 23:41:00
○ 2026-11-10 12:28:26

●MXmx1-us1.ppe-hosted.com2026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

●MXmx2-us1.ppe-hosted.com2026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

○MXsmtp.secureserver.net2017-03-13 → 2017-03-13 · 3 obs

● 2017-03-13 19:51:04
○ 2026-08-29 23:41:00
○ 2026-11-10 12:28:26

○A184.168.221.562017-03-13 → 2017-03-13 · 3 obs

● 2017-03-13 19:51:04
○ 2026-08-29 23:41:00
○ 2026-11-10 12:28:26

●A198.202.211.12026-08-29 → 2026-11-10 · 3 obs

○ 2017-03-13 19:51:04
● 2026-08-29 23:41:00
● 2026-11-10 12:28:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	m.gtld-servers.net, i.gtld-servers.net, b.gtld-servers.net, k.gtld-servers.net...	-
changesync.com	dean.ns.cloudflare.com, tori.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.231

NS records: dean.ns.cloudflare.com, tori.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 108ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`198.202.211.1`
NS	2	`dean.ns.cloudflare.com, tori.ns.cloudflare.com`
MX	3	`changesync-com.mail.protection.outlook.c, mx1-us1.ppe-hosted.com (pri: 10)...`
TXT	5	`MS=ms14153232, brevo-code:6e346bae65be9a05073b9d41cc0b0...`
SOA	1	`dean.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dean.ns.cloudflare.com, dean.ns.cloudflare.com, dean.ns.cloudflare.com...)

Analysis

Hierarchy

changesync.com is the parent zone for admin-gophish.changesync.com.

IP Addresses

changesync.com resolves to just one IP address, 198.202.211.1.

Two other host names, along with runacrossamerica.app, fastuppartners.com and carecon-ambulant.de, also share IP numbers with changesync.com.

Name Servers

changesync.com is served by two delegated name servers, dean.ns.cloudflare.com and tori.ns.cloudflare.com.

changesync.com shares its NS records with other domains, for example waspex.co.uk, support-stelle.online, hl-1.tv and two others.

changesync.com partially shares its NS delegation with several other domains, including mv555.club, raymond-bx1.pages.dev, paige-vanzant-(0x6f6e6c7966616e73)-leak.pages.dev and two others.

These name servers are regularly seen alongside elliot.ns.cloudflare.com and weston.ns.cloudflare.com as name servers.

DNS names with 6 IP addresses:

dean.ns.cloudflare.com carries IP addresses 108.162.193.153, 172.64.33.153 and 173.245.59.153, with 3 other addresses beyond those.

tori.ns.cloudflare.com carries IP addresses 108.162.192.231, 172.64.32.231 and 173.245.58.231, with 3 other addresses beyond those.

Mail Servers

changesync.com uses three mail servers — mx1-us1.ppe-hosted.com, mx2-us1.ppe-hosted.com and changesync-com.mail.protection.outlook.com.

There is at least a partial MX overlap between changesync.com and other domains, including sarahmonaco.com, approvedlink.com, venturestudios.net and two others.

DNS names with 8 IP addresses:

changesync-com.mail.protection.outlook.com carries IP addresses 52.101.9.34, 52.101.50.13 and 52.101.202.150, with 5 other addresses beyond those.

Host names that have two IP addresses:

mx1-us1.ppe-hosted.com maps to two IP addresses — 67.231.154.162 and 148.163.129.50.

mx2-us1.ppe-hosted.com maps to two IP addresses — 67.231.154.163 and 148.163.129.51.