attacker-host.com - dns.ninja

`attacker-host.com`

DNSSEC	⚠️ Not signed
NS	`ns-1258.awsdns-29.org` ⚠️ Not in zone NS records
		A	2600:9000:5304:ea00::1^{🇺🇸 Amazon2600:9000:5304::/48 - CloudFront}
			PTR	`ns-1258.awsdns-29.org`
		A	205.251.196.234^{🇺🇸 Amazon205.251.196.0/24 prefix}
			PTR	`ns-1258.awsdns-29.org`
NS	`ns-1998.awsdns-57.co.uk` ⚠️ Not in zone NS records
		A	2600:9000:5307:ce00::1^{🇺🇸 Amazon2600:9000:5307::/48 - CloudFront}
			PTR	`ns-1998.awsdns-57.co.uk`
		A	205.251.199.206^{🇺🇸 Amazon205.251.199.0/24 prefix}
			PTR	`ns-1998.awsdns-57.co.uk`
NS	`ns-356.awsdns-44.com` ⚠️ Not in zone NS records
		A	2600:9000:5301:6400::1^{🇺🇸 Amazon2600:9000:5301::/48 - CloudFront}
			PTR	`ns-356.awsdns-44.com`
		A	205.251.193.100^{🇺🇸 Amazon205.251.193.0/24 prefix}
			PTR	`ns-356.awsdns-44.com`
NS	`ns-937.awsdns-53.net` ⚠️ Not in zone NS records
		A	2600:9000:5303:a900::1^{🇺🇸 Amazon2600:9000:5303::/48 - CloudFront}
			PTR	`ns-937.awsdns-53.net`
		A	205.251.195.169^{🇺🇸 Amazon205.251.195.0/24 prefix}
			PTR	`ns-937.awsdns-53.net`

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786092439

Same first word

attacker-host.com

DNS History

18 records (4 active, 14 former)

○NSdns1.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○NSdns1.registrar-servers.com,2016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

○NSdns2.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○NSdns3.registrar-servers.com2016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

○NSdns4.registrar-servers.com2016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

○NSdns5.registrar-servers.com2016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

●NSns-1258.awsdns-29.org2026-06-12 → 2026-08-07 · 3 obs

○ 2018-10-09 06:00:18
● 2026-06-12 00:16:34
● 2026-08-07 09:09:30

●NSns-1998.awsdns-57.co.uk2026-06-12 → 2026-08-07 · 3 obs

○ 2018-10-09 06:00:18
● 2026-06-12 00:16:34
● 2026-08-07 09:09:30

●NSns-356.awsdns-44.com2026-06-12 → 2026-08-07 · 3 obs

○ 2018-10-09 06:00:18
● 2026-06-12 00:16:34
● 2026-08-07 09:09:30

●NSns-937.awsdns-53.net2026-06-12 → 2026-08-07 · 3 obs

○ 2018-10-09 06:00:18
● 2026-06-12 00:16:34
● 2026-08-07 09:09:30

○MXeforward1.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○MXeforward2.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○MXeforward3.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○MXeforward4.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○MXeforward5.registrar-servers.com2016-12-15 → 2018-10-09 · 4 obs

● 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○A12.43.46.2262018-10-09 → 2018-10-09 · 4 obs

○ 2016-12-15 14:01:08
● 2018-10-09 06:00:18
○ 2026-06-12 00:16:34
○ 2026-08-07 09:09:30

○A172.99.95.1642016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

○A192.64.119.222016-12-15 → 2016-12-15 · 3 obs

● 2016-12-15 14:01:08
○ 2018-10-09 06:00:18
○ 2026-08-07 09:09:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
attacker-host.com	ns-356.awsdns-44.com, ns-937.awsdns-53.net, ns-1258.awsdns-29.org, ns-1998.awsdns-57.co.uk	2 records

✅ Authoritative Response

Server:205.251.195.169

NS records: ns-356.awsdns-44.com, ns-937.awsdns-53.net, ns-1258.awsdns-29.org, ns-1998.awsdns-57.co.uk

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attacker-host.com (unsigned zone)

⏱️ Timing

Total: 465ms | Queries: -

📄 Records

Type	Count	Sample Data

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (ns-356.awsdns-44.com, ns-356.awsdns-44.com)

Analysis

Name Servers

Four name servers handle the delegation for attacker-host.com: ns-356.awsdns-44.com, ns-937.awsdns-53.net, ns-1258.awsdns-29.org and ns-1998.awsdns-57.co.uk.

There is at least partial name server overlap between attacker-host.com and other domains — myenbrelguidefeedback.com, easy-creator.net, apps.seek-now.com and two more among them.

All four hostnames — ns-356.awsdns-44.com, ns-937.awsdns-53.net, ns-1258.awsdns-29.org and ns-1998.awsdns-57.co.uk — resolve to two IP numbers apiece: ns-356.awsdns-44.com to 205.251.193.100 and 2600:9000:5301:6400::1; ns-937.awsdns-53.net to 205.251.195.169 and 2600:9000:5303:a900::1; ns-1258.awsdns-29.org to 205.251.196.234 and 2600:9000:5304:ea00::1; ns-1998.awsdns-57.co.uk to 205.251.199.206 and 2600:9000:5307:ce00::1.