789step.com - dns.ninja

`789step.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:47a^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:8411^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.4.122^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.132.17^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`igor.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b77^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`igor.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c177^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`igor.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2177^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`igor.ns.cloudflare.com`
		A	108.162.193.119^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`igor.ns.cloudflare.com`
		A	172.64.33.119^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`igor.ns.cloudflare.com`
		A	173.245.59.119^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`igor.ns.cloudflare.com`
NS	`marissa.ns.cloudflare.com`
		A	2606:4700:50::a29f:2672^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marissa.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c272^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`marissa.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2272^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`marissa.ns.cloudflare.com`
		A	108.162.194.114^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marissa.ns.cloudflare.com`
		A	162.159.38.114^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marissa.ns.cloudflare.com`
		A	172.64.34.114^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marissa.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.4.122, 172.67.132.17
		IPv6 hints	2606:4700:3030::6815:47a, 2606:4700:3034::ac43:8411
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=65, name=cloudflare-ech.com
SOA	`igor.ns.cloudflare.com`dns@cloudflare.com serial=2408063160

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785140157

WOT: SUSPICIOUS (61/100)

Same first word

789step.vip

789step.app

789step.com

789step.xyz

DNS History

7 records (6 active, 1 former)

●NSigor.ns.cloudflare.com2026-02-17 → 2026-07-27 · 2 obs

● 2026-02-17 19:50:56
● 2026-07-27 08:24:08

●NSmarissa.ns.cloudflare.com2026-02-17 → 2026-07-27 · 2 obs

● 2026-02-17 19:50:56
● 2026-07-27 08:24:08

●A104.21.4.1222026-02-17 → 2026-07-27 · 2 obs

● 2026-02-17 19:50:56
● 2026-07-27 08:24:08

●A172.67.132.172026-02-17 → 2026-07-27 · 2 obs

● 2026-02-17 19:50:56
● 2026-07-27 08:24:08

●A2606:4700:3030::6815:47a2026-07-04 → 2026-07-27 · 3 obs

○ 2026-06-09 21:45:08
● 2026-07-04 13:58:18
● 2026-07-27 08:24:08

○A2606:4700:3031::6815:47a2026-02-17 → 2026-06-09 · 4 obs

● 2026-02-17 19:50:56
● 2026-06-09 21:45:08
○ 2026-07-04 13:58:18
○ 2026-07-27 08:24:08

●A2606:4700:3034::ac43:84112026-02-17 → 2026-07-27 · 2 obs

● 2026-02-17 19:50:56
● 2026-07-27 08:24:08

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
789step.com	igor.ns.cloudflare.com, marissa.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.119

NS records: igor.ns.cloudflare.com, marissa.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 789step.com (unsigned zone)

⏱️ Timing

Total: 172ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.4.122, 172.67.132.17`
AAAA	2	`2606:4700:3030::6815:47a, 2606:4700:3034::ac43:8411`
NS	2	`igor.ns.cloudflare.com, marissa.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`igor.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (igor.ns.cloudflare.com, igor.ns.cloudflare.com, igor.ns.cloudflare.com...)

Analysis

IP Addresses

789step.com directs to four IP numbers, which are 104.21.4.122, 172.67.132.17, 2606:4700:3030::6815:47a and 2606:4700:3034::ac43:8411.

Additional host names — careerpeakpaths.qpon, mail.24kadra.com, mail.rate.ikiev.ua and two others — share IP numbers with 789step.com.

Name Servers

Two name servers handle the delegation for 789step.com: igor.ns.cloudflare.com and marissa.ns.cloudflare.com.

789step.com shares its name server setup with other domains, including offtheback.co.nz, d831920d2024835a5639fc57.workers.dev, claude-finance.pages.dev and two others.

The name servers of 789step.com overlap at least partially with those of other domains — among them flow-base.sbs, mwtxt.net, tipsterchat.com and two more.

These name servers commonly co-occur with the name servers albert.ns.cloudflare.com, eva.ns.cloudflare.com, ishaan.ns.cloudflare.com and jeff.ns.cloudflare.com.

Host names with 6 IP numbers:

igor.ns.cloudflare.com resolves to 108.162.193.119, 172.64.33.119 and 173.245.59.119 among others, with 3 other IP addresses in total.

marissa.ns.cloudflare.com resolves to 108.162.194.114, 162.159.38.114 and 172.64.34.114 among others, with 3 other IP addresses in total.