replaceremotes.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`replaceremotes.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:1325^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b8f3^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.19.37^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.243^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`kai.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bbc^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1bc^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kai.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21bc^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kai.ns.cloudflare.com`
		A	108.162.193.188^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	172.64.33.188^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
		A	173.245.59.188^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kai.ns.cloudflare.com`
NS	`tia.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tia.ns.cloudflare.com`
		A	108.162.192.229^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tia.ns.cloudflare.com`
		A	172.64.32.229^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tia.ns.cloudflare.com`
		A	173.245.58.229^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tia.ns.cloudflare.com`
MX	`mx1.forwardemail.net` ⭐
		A	2604:a880:2:d0::306:1^{🇺🇸 DIGITALOCEAN2604:a880:2::/48 DigitalOcean}
			PTR	`mx1.forwardemail.net`
		A	2a02:6ea0:d71e::2^{🇺🇸 CDN772a02:6ea0:d700::/40 Denver IPv6}
			PTR	`mx1.forwardemail.net`
		A	121.127.44.56^{🇺🇸 CDN77121.127.44.0/24 Denver}
			PTR	`mx1.forwardemail.net`
		A	138.197.213.185^{🇺🇸 DIGITALOCEAN138.197.208.0/20 DigitalOcean}
			PTR	`mx1.forwardemail.net`
MX	`mx2.forwardemail.net` ⭐
		A	2604:a880:400:d1::cd:9001^{🇺🇸 DIGITALOCEAN2604:a880:400::/48 DigitalOcean}
			PTR	`mx2.forwardemail.net`
		A	2a02:6ea0:d71e::1^{🇺🇸 CDN772a02:6ea0:d700::/40 Denver IPv6}
			PTR	`mx2.forwardemail.net`
		A	104.248.224.170^{🇺🇸 DIGITALOCEAN104.248.224.0/20 DigitalOcean}
			PTR	`mx2.forwardemail.net`
		A	121.127.44.59^{🇺🇸 CDN77121.127.44.0/24 Denver}
			PTR	`mx2.forwardemail.net`
TXT	`forward-email-site-verification=RhUmzqRHWu`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.19.37, 172.67.184.243
		IPv6 hints	2606:4700:3032::6815:1325, 2606:4700:3036::ac43:b8f3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=133, name=cloudflare-ech.com
SOA	`kai.ns.cloudflare.com`dns@cloudflare.com serial=2414908375

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1789858748

Same first word

replaceremotes.com

Previous names

Next names

DNS History

18 records (8 active, 10 former)

○NSdns1.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

○NSdns2.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

○NSdns3.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

○NSdns4.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

○NSdns5.name-services.com2015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

●NSkai.ns.cloudflare.com2026-09-06 → 2026-09-19 · 3 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
● 2026-09-19 23:02:12

●NStia.ns.cloudflare.com2026-09-06 → 2026-09-19 · 3 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
● 2026-09-19 23:02:12

●MXmx1.forwardemail.net2026-09-06 → 2026-09-19 · 2 obs

● 2026-09-06 22:19:16
● 2026-09-19 23:02:12

●MXmx2.forwardemail.net2026-09-06 → 2026-09-19 · 2 obs

● 2026-09-06 22:19:16
● 2026-09-19 23:02:12

●A104.21.19.372026-09-17 → 2026-09-19 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-09-19 23:02:12

●A172.67.184.2432026-09-17 → 2026-09-19 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-09-19 23:02:12

○A188.114.96.02026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-09-19 23:02:12

○A188.114.97.02026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-09-19 23:02:12

●A2606:4700:3032::6815:13252026-09-17 → 2026-09-19 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-09-19 23:02:12

●A2606:4700:3036::ac43:b8f32026-09-17 → 2026-09-19 · 3 obs

○ 2026-09-06 22:19:16
● 2026-09-17 22:23:12
● 2026-09-19 23:02:12

○A2a06:98c1:3120::2026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-09-19 23:02:12

○A2a06:98c1:3121::2026-09-06 → 2026-09-06 · 4 obs

○ 2017-06-18 18:08:34
● 2026-09-06 22:19:16
○ 2026-09-17 22:23:12
○ 2026-09-19 23:02:12

○A54.187.254.832015-08-10 → 2017-06-18 · 4 obs

● 2015-08-10 16:46:42
● 2017-06-18 18:08:34
○ 2026-09-06 22:19:16
○ 2026-09-19 23:02:12

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
replaceremotes.com	tia.ns.cloudflare.com, kai.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:173.245.58.229

NS records: tia.ns.cloudflare.com, kai.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for replaceremotes.com (unsigned zone)

⏱️ Timing

Total: 196ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.19.37, 172.67.184.243`
AAAA	2	`2606:4700:3036::ac43:b8f3, 2606:4700:3032::6815:1325`
NS	2	`kai.ns.cloudflare.com, tia.ns.cloudflare.com`
MX	2	`mx1.forwardemail.net (pri: 10), mx2.forwardemail.net (pri: 10)`
TXT	1	`forward-email-site-verification=RhUmzqRH`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`kai.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (tia.ns.cloudflare.com, tia.ns.cloudflare.com, tia.ns.cloudflare.com...)

Analysis

IP Addresses

replaceremotes.com directs to four IP numbers, which are 104.21.19.37, 172.67.184.243, 2606:4700:3032::6815:1325 and 2606:4700:3036::ac43:b8f3.

balikini.id, albertahub.online, allorobot.fr plus two other host names have IP numbers in common with replaceremotes.com.

Name Servers

Two name servers handle the delegation for replaceremotes.com: kai.ns.cloudflare.com and tia.ns.cloudflare.com.

The name server configuration of replaceremotes.com is shared with other domains, for instance installedaudio.com, pasrinimul.pages.dev, romantichujor.workers.dev and two others.

There is at least partial name server overlap between replaceremotes.com and other domains — ncmedios.com, awneoon.eu, funbypass.com and two more among them.

These name servers are routinely deployed together with the name servers pearl.ns.cloudflare.com.

Hosts with 6 IP addresses each:

kai.ns.cloudflare.com resolves to 108.162.193.188, 172.64.33.188 and 173.245.59.188 among others, with 3 other IP addresses in total.

tia.ns.cloudflare.com resolves to 108.162.192.229, 172.64.32.229 and 173.245.58.229 among others, with 3 other IP addresses in total.

Mail Servers

replaceremotes.com uses two mail servers, mx1.forwardemail.net and mx2.forwardemail.net.

The mail server setup of replaceremotes.com matches that of other domains such as famousgreyx.com, meamy.com, homefarmpoloevents.co.uk and two others.

replaceremotes.com and a number of other domains — fmb-advocacia.com.br, tegovafrance.com, puno.app and venusbookings.com among them — share at least some of the same mail servers.

Each of the hosts mx1.forwardemail.net and mx2.forwardemail.net has four IP addresses: mx1.forwardemail.net points to 121.127.44.56, 138.197.213.185, 2604:a880:2:d0::306:1 and 2a02:6ea0:d71e::2, and mx2.forwardemail.net points to 104.248.224.170, 121.127.44.59, 2604:a880:400:d1::cd:9001 and 2a02:6ea0:d71e::1.