badcommand.ai - dns.ninja

`badcommand.ai`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::ac43:ad04^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:602f^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.96.47^{Cloudflare104.21.96.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.173.4^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brad.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b69^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c169^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brad.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2169^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brad.ns.cloudflare.com`
		A	108.162.193.105^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	172.64.33.105^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	173.245.59.105^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
NS	`kristin.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ab5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kristin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0b5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kristin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20b5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kristin.ns.cloudflare.com`
		A	108.162.192.181^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kristin.ns.cloudflare.com`
		A	172.64.32.181^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kristin.ns.cloudflare.com`
		A	173.245.58.181^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kristin.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c1b::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`wv-in-f26.1e100.net`
		A	192.178.218.26^{🇺🇸 Google192.178.218.0/24}
			PTR	`yuiadtq-in-f26.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c01::1a^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`di-in-f26.1e100.net`
		A	74.125.193.27^{🇺🇸 Google74.125.193.0/24}
			PTR	`di-in-f27.1e100.net`
			PTR	`ig-in-f27.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`google-site-verification=Vd28_nPxvWdHRGFK7HtjoiS2QegFFf7_h3VaAl0bzWQ`
TXT	`v=spf1 include:_spf.google.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.96.47, 172.67.173.4
		IPv6 hints	2606:4700:3035::ac43:ad04, 2606:4700:3036::6815:602f
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=109, name=cloudflare-ech.com
SOA	`brad.ns.cloudflare.com`dns@cloudflare.com serial=2410664581

`ai`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.ai` ⭐
	NS	`v0n1.nic.ai`
	NS	`v0n2.nic.ai`
	NS	`v0n3.nic.ai`
	NS	`v2n0.nic.ai`
	NS	`v2n1.nic.ai`
	SOA	`v0n0.nic.ai`hostmaster@donuts.email serial=1785457201

Same first word

badcommand.ai

Similar names

adbcommand.blogspot.com

DNS History

16 records (11 active, 5 former)

●NSbrad.ns.cloudflare.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●NSkristin.ns.cloudflare.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●MXalt1.aspmx.l.google.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●MXalt2.aspmx.l.google.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●MXalt3.aspmx.l.google.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●MXalt4.aspmx.l.google.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●MXaspmx.l.google.com2026-05-21 → 2026-07-31 · 2 obs

● 2026-05-21 04:33:44
● 2026-07-31 00:27:54

●A104.21.96.472026-05-21 → 2026-07-31 · 5 obs

● 2026-05-21 04:33:44
● 2026-06-11 14:52:54
○ 2026-06-24 19:36:02
● 2026-07-12 23:30:52
● 2026-07-31 00:27:54

●A172.67.173.42026-05-21 → 2026-07-31 · 5 obs

● 2026-05-21 04:33:44
● 2026-06-11 14:52:54
○ 2026-06-24 19:36:02
● 2026-07-12 23:30:52
● 2026-07-31 00:27:54

○A188.114.96.02026-06-24 → 2026-06-24 · 4 obs

○ 2026-06-11 14:52:54
● 2026-06-24 19:36:02
○ 2026-07-12 23:30:52
○ 2026-07-31 00:27:54

○A188.114.97.02026-06-24 → 2026-06-24 · 4 obs

○ 2026-06-11 14:52:54
● 2026-06-24 19:36:02
○ 2026-07-12 23:30:52
○ 2026-07-31 00:27:54

○A2606:4700:3034::6815:602f2026-05-21 → 2026-06-11 · 4 obs

● 2026-05-21 04:33:44
● 2026-06-11 14:52:54
○ 2026-06-24 19:36:02
○ 2026-07-31 00:27:54

●A2606:4700:3035::ac43:ad042026-05-21 → 2026-07-31 · 5 obs

● 2026-05-21 04:33:44
● 2026-06-11 14:52:54
○ 2026-06-24 19:36:02
● 2026-07-12 23:30:52
● 2026-07-31 00:27:54

●A2606:4700:3036::6815:602f2026-07-12 → 2026-07-31 · 3 obs

○ 2026-06-24 19:36:02
● 2026-07-12 23:30:52
● 2026-07-31 00:27:54

○A2a06:98c1:3120::2026-06-24 → 2026-06-24 · 4 obs

○ 2026-06-11 14:52:54
● 2026-06-24 19:36:02
○ 2026-07-12 23:30:52
○ 2026-07-31 00:27:54

○A2a06:98c1:3121::2026-06-24 → 2026-06-24 · 4 obs

○ 2026-06-11 14:52:54
● 2026-06-24 19:36:02
○ 2026-07-12 23:30:52
○ 2026-07-31 00:27:54

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ai	v0n0.nic.ai, v0n1.nic.ai, v0n2.nic.ai, v0n3.nic.ai...	12 records
badcommand.ai	kristin.ns.cloudflare.com, brad.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.181

NS records: kristin.ns.cloudflare.com, brad.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for badcommand.ai (unsigned zone)

⏱️ Timing

Total: 579ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.96.47, 172.67.173.4`
AAAA	2	`2606:4700:3035::ac43:ad04, 2606:4700:3036::6815:602f`
NS	2	`brad.ns.cloudflare.com, kristin.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`google-site-verification=Vd28_nPxvWdHRGF, v=spf1 include:_spf.google.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brad.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.ai, v0n1.nic.ai, v0n2.nic.ai...)

Analysis

IP Addresses

badcommand.ai directs to four IP numbers, which are 104.21.96.47, 172.67.173.4, 2606:4700:3035::ac43:ad04 and 2606:4700:3036::6815:602f.

Two other host names, along with vazrazhdane.bg, linkvipgr303.pics and tuscana.com, also share IP numbers with badcommand.ai.

Name Servers

The NS records for badcommand.ai delegate to brad.ns.cloudflare.com and kristin.ns.cloudflare.com.

badcommand.ai shares its NS records with other domains, for example 127yardsale.com, orbsl.com, alumnieropa.org and two others.

There is at least partial name server overlap between badcommand.ai and other domains — wapmaster.in, maxmarry.com, zouscrabay.com and two more among them.

These name servers frequently co-occur with the name servers serenity.ns.cloudflare.com and emma.ns.cloudflare.com.

DNS names with 6 IP addresses:

brad.ns.cloudflare.com maps to 108.162.193.105, 172.64.33.105, 173.245.59.105 and 3 additional IP addresses.

kristin.ns.cloudflare.com maps to 108.162.192.181, 172.64.32.181, 173.245.58.181 and 3 additional IP addresses.

Mail Servers

Five mail servers handle badcommand.ai: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between badcommand.ai and other domains, including cronor.cl, yonkoma.info, pipeventos.com and two others.

alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx3.googlemail.com and aspmx2.googlemail.com are mail servers that frequently appear together with these mail servers.

Host names that have two IP addresses:

The A records for aspmx.l.google.com return 192.178.218.26 and 2607:f8b0:4004:c1b::1a.

The A records for alt1.aspmx.l.google.com return 108.177.123.27 and 2800:3f0:4003:c0f::1b.

The A records for alt2.aspmx.l.google.com return 74.125.193.27 and 2a00:1450:400b:c01::1a.

The A records for alt3.aspmx.l.google.com return 192.178.223.26 and 2a00:1450:4009:c0f::1b.

The A records for alt4.aspmx.l.google.com return 172.253.157.26 and 2a00:1450:400c:c23::1b.