attackonscreen.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`attackonscreen.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:864a^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:198c^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.25.140^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.134.74^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`marek.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bca^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ca^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`marek.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ca^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`marek.ns.cloudflare.com`
		A	108.162.193.202^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	172.64.33.202^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	173.245.59.202^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
NS	`pola.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ad6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pola.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0d6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`pola.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20d6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`pola.ns.cloudflare.com`
		A	108.162.192.214^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pola.ns.cloudflare.com`
		A	172.64.32.214^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pola.ns.cloudflare.com`
		A	173.245.58.214^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`pola.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.25.140, 172.67.134.74
		IPv6 hints	2606:4700:3034::ac43:864a, 2606:4700:3037::6815:198c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=114, name=cloudflare-ech.com
SOA	`marek.ns.cloudflare.com`dns@cloudflare.com serial=2415277912

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1791838744

Same first word

attackonscreen.com

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSmarek.ns.cloudflare.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●NSpola.ns.cloudflare.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●MXeforward1.registrar-servers.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●MXeforward2.registrar-servers.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●MXeforward3.registrar-servers.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●MXeforward4.registrar-servers.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●MXeforward5.registrar-servers.com2026-09-14 → 2026-10-12 · 2 obs

● 2026-09-14 13:59:16
● 2026-10-12 21:18:42

●A104.21.25.1402026-10-11 → 2026-10-12 · 3 obs

○ 2026-09-14 13:59:16
● 2026-10-11 23:01:04
● 2026-10-12 21:18:42

●A172.67.134.742026-10-11 → 2026-10-12 · 3 obs

○ 2026-09-14 13:59:16
● 2026-10-11 23:01:04
● 2026-10-12 21:18:42

○A188.114.96.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 13:59:16
○ 2026-10-11 23:01:04
○ 2026-10-12 21:18:42

○A188.114.97.02026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 13:59:16
○ 2026-10-11 23:01:04
○ 2026-10-12 21:18:42

●A2606:4700:3034::ac43:864a2026-10-11 → 2026-10-12 · 3 obs

○ 2026-09-14 13:59:16
● 2026-10-11 23:01:04
● 2026-10-12 21:18:42

●A2606:4700:3037::6815:198c2026-10-11 → 2026-10-12 · 3 obs

○ 2026-09-14 13:59:16
● 2026-10-11 23:01:04
● 2026-10-12 21:18:42

○A2a06:98c1:3120::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 13:59:16
○ 2026-10-11 23:01:04
○ 2026-10-12 21:18:42

○A2a06:98c1:3121::2026-09-14 → 2026-09-14 · 3 obs

● 2026-09-14 13:59:16
○ 2026-10-11 23:01:04
○ 2026-10-12 21:18:42

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
attackonscreen.com	marek.ns.cloudflare.com, pola.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.214

NS records: marek.ns.cloudflare.com, pola.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attackonscreen.com (unsigned zone)

⏱️ Timing

Total: 235ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.134.74, 104.21.25.140`
AAAA	2	`2606:4700:3034::ac43:864a, 2606:4700:3037::6815:198c`
NS	2	`marek.ns.cloudflare.com, pola.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`marek.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (marek.ns.cloudflare.com, marek.ns.cloudflare.com, marek.ns.cloudflare.com...)

Analysis

IP Addresses

attackonscreen.com has four IP addresses: 104.21.25.140, 172.67.134.74, 2606:4700:3034::ac43:864a and 2606:4700:3037::6815:198c.

kalatitr.com, myeasycleaning.ru, scornach.com and two other host names share IP numbers with attackonscreen.com.

Name Servers

attackonscreen.com uses two name servers for its delegation: marek.ns.cloudflare.com and pola.ns.cloudflare.com.

attackonscreen.com uses the same name servers as several other domains — among them velvetmatch.sbs, ap27.in, camilakoszka.com.br and two more.

attackonscreen.com partially shares its NS delegation with several other domains, including msgmoney.one, jesuitsusa.com, megapari1-ind.com and two others.

These name servers are regularly seen alongside amit.ns.cloudflare.com and trevor.ns.cloudflare.com as name servers.

Hostnames that resolve to 6 IP addresses:

Hostname marek.ns.cloudflare.com directs to 108.162.193.202, 172.64.33.202 and 173.245.59.202 along with 3 other IP addresses.

Hostname pola.ns.cloudflare.com directs to 108.162.192.214, 172.64.32.214 and 173.245.58.214 along with 3 other IP addresses.

Mail Servers

Mail for attackonscreen.com is handled by five mail servers, namely eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

attackonscreen.com has at least partial mail server overlap with other domains such as lascrucesshowers.com, seemenot.com, hotcabanabot.com and two more.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com regularly co-occur with these mail servers.

Hosts with just one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.