changecipherspec.net - dns.ninja

`changecipherspec.net`

DNSSEC	🔒 Signed (DS record present)
A	2a01:4f8:c0c:5d0a::1^{🇩🇪 Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK}
		PTR	`spectre.linkdead.de`
A	78.47.81.144^{🇩🇪 Hetzner78.46.0.0/15 HETZNER-RZ-NBG-BLK5}
NS	`ns2.linkdead.de` ⭐
		A	2a01:4f8:1c17:4310::2^{🇩🇪 Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK}
			PTR	`vampire.linkdead.de`
		A	78.46.188.137^{🇩🇪 Hetzner78.46.0.0/15 HETZNER-RZ-NBG-BLK5}
			PTR	`vampire.linkdead.de`
NS	`dns.noris.ch`
		A	2001:780:53d3::53^{🇩🇪 NORIS-NETWORK2001:780::/32 NORIS-AS12337-NET}
			PTR	`dns.noris.ch`
		A	194.31.2.65^{🇩🇪 NORIS-NETWORK194.31.2.0/24 ASTEL-NET}
			PTR	`dns.noris.ch`
NS	`dns.noris.de`
		A	2001:780:53d2::53^{🇩🇪 NORIS-NETWORK2001:780::/32 NORIS-AS12337-NET}
			PTR	`dns.noris.de`
		A	192.109.102.65^{🇩🇪 NORIS-NETWORK192.109.102.0/24 NBG-NET}
			PTR	`dns.noris.de`
NS	`dns.noris.net`
		A	2001:780:53d1::53^{🇩🇪 NORIS-NETWORK2001:780::/32 NORIS-AS12337-NET}
			PTR	`dns.noris.net`
		A	213.95.0.65^{🇩🇪 NORIS-NETWORK213.95.0.0/16 NORIS-BLK2}
			PTR	`dns.noris.net`
NS	`ns3.linkdead.de`
		A	2a01:4f9:c010:2691::2^{🇫🇮 Hetzner2a01:4f9::/32 HETZNER-IPv6-BLK}
			PTR	`wraith.linkdead.de`
		A	95.216.172.226^{🇫🇮 Hetzner95.216.0.0/16 HETZNER-DC}
			PTR	`wraith.linkdead.de`
MX	`wight.linkdead.de` ⭐
		A	2a01:4f8:c2c:3a9a::1^{🇩🇪 Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK}
			PTR	`wight.linkdead.de`
		A	116.203.136.251^{🇩🇪 Hetzner116.203.0.0/16 HETZNER-DC}
			PTR	`wight.linkdead.de`
TXT	`v=spf1 mx a:wight.linkdead.de a:shade.linkdead.de a:mail1.linkdead.de a:mail2...`
SOA	`ns2.linkdead.de`hostmaster@linkdead.de serial=1783555200

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784058982

Same first word

changecipherspec.net

DNS History

13 records (8 active, 5 former)

●NSdns.noris.ch2015-05-21 → 2026-07-14 · 2 obs

● 2015-05-21 04:33:12
● 2026-07-14 20:22:14

●NSdns.noris.de2015-05-21 → 2026-07-14 · 2 obs

● 2015-05-21 04:33:12
● 2026-07-14 20:22:14

●NSdns.noris.net2015-05-21 → 2026-07-14 · 2 obs

● 2015-05-21 04:33:12
● 2026-07-14 20:22:14

○NSns1.linkdead.de2015-05-21 → 2018-01-25 · 4 obs

● 2015-05-21 04:33:12
● 2018-01-25 17:44:46
○ 2026-04-01 08:43:22
○ 2026-07-14 20:22:14

●NSns2.linkdead.de2016-11-26 → 2026-07-14 · 3 obs

○ 2016-04-10 14:12:58
● 2016-11-26 03:30:34
● 2026-07-14 20:22:14

●NSns3.linkdead.de2026-04-01 → 2026-07-14 · 3 obs

○ 2018-01-25 17:44:46
● 2026-04-01 08:43:22
● 2026-07-14 20:22:14

○NSns4.linkdead.de2015-05-21 → 2016-04-10 · 4 obs

● 2015-05-21 04:33:12
● 2016-04-10 14:12:58
○ 2016-11-26 03:30:34
○ 2026-07-14 20:22:14

○MXspectre.linkdead.de2015-05-21 → 2018-01-25 · 4 obs

● 2015-05-21 04:33:12
● 2018-01-25 17:44:46
○ 2026-04-01 08:43:22
○ 2026-07-14 20:22:14

●MXwight.linkdead.de2026-04-01 → 2026-07-14 · 3 obs

○ 2018-01-25 17:44:46
● 2026-04-01 08:43:22
● 2026-07-14 20:22:14

●A2a01:4f8:c0c:5d0a::12026-04-01 → 2026-07-14 · 3 obs

○ 2018-01-25 17:44:46
● 2026-04-01 08:43:22
● 2026-07-14 20:22:14

○A2a01:4f8:d16:7048::22015-05-21 → 2018-01-25 · 4 obs

● 2015-05-21 04:33:12
● 2018-01-25 17:44:46
○ 2026-04-01 08:43:22
○ 2026-07-14 20:22:14

○A78.47.186.1422015-05-21 → 2018-01-25 · 4 obs

● 2015-05-21 04:33:12
● 2018-01-25 17:44:46
○ 2026-04-01 08:43:22
○ 2026-07-14 20:22:14

●A78.47.81.1442026-04-01 → 2026-07-14 · 3 obs

○ 2018-01-25 17:44:46
● 2026-04-01 08:43:22
● 2026-07-14 20:22:14

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	h.gtld-servers.net, d.gtld-servers.net, b.gtld-servers.net, j.gtld-servers.net...	-
changecipherspec.net	dns.noris.ch, dns.noris.de, dns.noris.net, ns2.linkdead.de...	2 records

✅ Authoritative Response

Server:192.109.102.65

NS records: dns.noris.ch, dns.noris.de, dns.noris.net, ns2.linkdead.de, ns3.linkdead.de

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 1126ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`78.47.81.144`
AAAA	1	`2a01:4f8:c0c:5d0a::1`
NS	5	`dns.noris.ch, ns2.linkdead.de...`
MX	1	`wight.linkdead.de (pri: 10)`
TXT	1	`v=spf1 mx a:wight.linkdead.de a:shade.li`
SOA	1	`ns2.linkdead.de hostmaster.linkdead.de`

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (dns.noris.net, dns.noris.net)

Analysis

IP Addresses

changecipherspec.net has two IP addresses: 78.47.81.144 and 2a01:4f8:c0c:5d0a::1

spectre.linkdead.de and linkdead.de are among other host names that share IP numbers with changecipherspec.net.

Name Servers

The authoritative name servers for changecipherspec.net are dns.noris.ch, ns2.linkdead.de, ns3.linkdead.de and two others.

The name servers of changecipherspec.net overlap at least partially with those of other domains — among them urlaubskritiken.de, 86.155.213.in-addr.arpa, ba-die-agentur.eu and two more.

These name servers commonly appear in delegations together with dns.noris.net, dns.noris.de, dns0.noris.net and 4 other.

Hosts with two IP numbers each:

dns.noris.ch points to 194.31.2.65 and 2001:780:53d3::53.

ns2.linkdead.de points to 78.46.188.137 and 2a01:4f8:1c17:4310::2.

ns3.linkdead.de points to 95.216.172.226 and 2a01:4f9:c010:2691::2.

dns.noris.de points to 192.109.102.65 and 2001:780:53d2::53.

dns.noris.net points to 213.95.0.65 and 2001:780:53d1::53.

Mail Servers

changecipherspec.net routes its mail through a single mail server, wight.linkdead.de.

The MX records for changecipherspec.net match those of other domains — including wolfcall.de and linkdead.net.

changecipherspec.net has mail servers in common with other domains — linkdead.de being one example.

It is common to find these mail servers paired with the mail servers fakemx.linkdead.de.

wight.linkdead.de resolves to two IP numbers — 116.203.136.251 and 2a01:4f8:c2c:3a9a::1.