attacker-controlled.com - dns.ninja

attacker-controlled.com

DNSSEC⚠️ Not signed
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
NSns1.afternic.com ⭐
A2603:5:2126::45🇺🇸 GODADDY-DNS2603:5:2120::/44
PTRns1.afternic.com
A97.74.98.69🇺🇸 GODADDY-DNS97.74.98.0/23
PTRns1.afternic.com
NSns2.afternic.com
A2603:5:2226::45🇺🇸 GODADDY-DNS2603:5:2220::/44
PTRns2.afternic.com
A173.201.66.69🇺🇸 GODADDY-DNS173.201.66.0/23
PTRns2.afternic.com
NSverification-d3jclucsp89ganyqbydeny.ns101.verify.hn ⚠️ Not in zone NS records
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
TXTv=spf1 -all
SOAns1.afternic.comdns@jomax.net serial=1

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1781429360

Same first word

attacker-controlled.com

DNS History

10 records (5 active, 5 former)

20192020202120222023202420252026NSns1.afternic.comns2.afternic.comverification-d3jclucsp89ganyqbydeny.ns101.verify.hndns1.registrar-servers.comdns2.registrar-servers.comMXmx1.privateemail.commx2.privateemail.comA13.248.169.4876.223.54.146192.64.119.176
○NSdns1.registrar-servers.com2018-08-17 → 2018-08-17 · 3 obs
● 2018-08-17 09:25:18
○ 2026-04-20 15:54:26
○ 2026-06-14 09:31:32
○NSdns2.registrar-servers.com2018-08-17 → 2018-08-17 · 3 obs
● 2018-08-17 09:25:18
○ 2026-04-20 15:54:26
○ 2026-06-14 09:31:32
●NSns1.afternic.com2026-04-20 → 2026-06-14 · 3 obs
○ 2018-08-17 09:25:18
● 2026-04-20 15:54:26
● 2026-06-14 09:31:32
●NSns2.afternic.com2026-04-20 → 2026-06-14 · 3 obs
○ 2018-08-17 09:25:18
● 2026-04-20 15:54:26
● 2026-06-14 09:31:32
●NSverification-d3jclucsp89ganyqbydeny.ns101.verify.hn2026-04-20 → 2026-06-14 · 3 obs
○ 2018-08-17 09:25:18
● 2026-04-20 15:54:26
● 2026-06-14 09:31:32
○MXmx1.privateemail.com2018-08-17 → 2018-08-17 · 3 obs
● 2018-08-17 09:25:18
○ 2026-04-20 15:54:26
○ 2026-06-14 09:31:32
○MXmx2.privateemail.com2018-08-17 → 2018-08-17 · 3 obs
● 2018-08-17 09:25:18
○ 2026-04-20 15:54:26
○ 2026-06-14 09:31:32
●A13.248.169.482026-04-20 → 2026-06-14 · 3 obs
○ 2018-08-17 09:25:18
● 2026-04-20 15:54:26
● 2026-06-14 09:31:32
○A192.64.119.1762018-08-17 → 2018-08-17 · 3 obs
● 2018-08-17 09:25:18
○ 2026-04-20 15:54:26
○ 2026-06-14 09:31:32
●A76.223.54.1462026-04-20 → 2026-06-14 · 3 obs
○ 2018-08-17 09:25:18
● 2026-04-20 15:54:26
● 2026-06-14 09:31:32

🔍 DNS Trace

Analysis

IP Addresses

attacker-controlled.com points to the IP addresses 13.248.169.48 and 76.223.54.146

Additional host names — www.ybc.cn, 7-betsixty.com, tour-ksc.com and two others — share IP numbers with attacker-controlled.com.

Name Servers

attacker-controlled.com is delegated to three name servers: ns1.afternic.com, ns2.afternic.com and verification-d3jclucsp89ganyqbydeny.ns101.verify.hn.

The name servers of attacker-controlled.com overlap at least partially with those of other domains — among them wallcoupon.com, 324605225r.cdn30s.com, vlog.company and two more.

These name servers commonly appear alongside the name servers verification-frb6pqdkkjlns5j4tthxc3.ns101.verify.hn and verification-ilzyovyxkjcylcmj8rbffy.ns101.verify.hn.

ns1.afternic.com, ns2.afternic.com and verification-d3jclucsp89ganyqbydeny.ns101.verify.hn each resolve to two IP addresses: ns1.afternic.com resolves to 97.74.98.69 and 2603:5:2126::45; ns2.afternic.com resolves to 173.201.66.69 and 2603:5:2226::45; verification-d3jclucsp89ganyqbydeny.ns101.verify.hn resolves to 13.248.169.48 and 76.223.54.146.