forexcrypt.com - dns.ninja

`forexcrypt.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:8ae4^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:4efa^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.78.250^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.138.228^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`heidi.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26ec^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2ec^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`heidi.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22ec^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`heidi.ns.cloudflare.com`
		A	108.162.194.236^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	162.159.38.236^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	172.64.34.236^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
NS	`kurt.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bc1^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kurt.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1c1^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kurt.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21c1^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kurt.ns.cloudflare.com`
		A	108.162.193.193^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kurt.ns.cloudflare.com`
		A	172.64.33.193^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kurt.ns.cloudflare.com`
		A	173.245.59.193^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kurt.ns.cloudflare.com`
MX	`smtp.secureserver.net` ⭐
		A	216.69.141.71^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp01-v01.prod.phx3.secureserver.net`
		A	216.69.141.84^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp02-v01.prod.phx3.secureserver.net`
		A	216.69.141.113^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp03-v01.prod.phx3.secureserver.net`
MX	`mailstore1.secureserver.net`⁽¹⁰⁾
		A	216.69.141.78^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp01-v02.prod.phx3.secureserver.net`
		A	216.69.141.114^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp03-v02.prod.phx3.secureserver.net`
		A	216.69.141.162^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp02-v02.prod.phx3.secureserver.net`
TXT	`D5527628`
TXT	`v=spf1 include:secureserver.net -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.78.250, 172.67.138.228
		IPv6 hints	2606:4700:3030::ac43:8ae4, 2606:4700:3034::6815:4efa
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=29, name=cloudflare-ech.com
SOA	`heidi.ns.cloudflare.com`dns@cloudflare.com serial=2405607687

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1783440501

Same first word

forexcrypt.com

DNS History

19 records (8 active, 11 former)

●NSheidi.ns.cloudflare.com2026-02-16 → 2026-07-07 · 3 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-07-07 16:22:26

●NSkurt.ns.cloudflare.com2026-02-16 → 2026-07-07 · 3 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-07-07 16:22:26

○NSns1.mirohost.net2018-05-17 → 2018-05-17 · 3 obs

● 2018-05-17 12:53:28
○ 2026-02-16 07:52:36
○ 2026-07-07 16:22:26

○NSns2.mirohost.net2018-05-17 → 2018-05-17 · 3 obs

● 2018-05-17 12:53:28
○ 2026-02-16 07:52:36
○ 2026-07-07 16:22:26

○NSns3.mirohost.net2018-05-17 → 2018-05-17 · 3 obs

● 2018-05-17 12:53:28
○ 2026-02-16 07:52:36
○ 2026-07-07 16:22:26

●MXmailstore1.secureserver.net2026-02-16 → 2026-07-07 · 3 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-07-07 16:22:26

○MXmx1.mirohost.net2018-05-17 → 2018-05-17 · 3 obs

● 2018-05-17 12:53:28
○ 2026-02-16 07:52:36
○ 2026-07-07 16:22:26

●MXsmtp.secureserver.net2026-02-16 → 2026-07-07 · 3 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-07-07 16:22:26

●A104.21.78.2502026-02-16 → 2026-07-07 · 9 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-03-30 09:21:02
○ 2026-04-09 12:00:08
○ 2026-05-09 22:30:36
● 2026-06-01 13:24:18
○ 2026-06-06 20:04:02
○ 2026-06-09 12:33:42
● 2026-07-07 16:22:26

●A172.67.138.2282026-02-16 → 2026-07-07 · 9 obs

○A188.114.96.02026-04-09 → 2026-06-09 · 7 obs

○ 2026-03-30 09:21:02
● 2026-04-09 12:00:08
● 2026-05-09 22:30:36
○ 2026-06-01 13:24:18
● 2026-06-06 20:04:02
● 2026-06-09 12:33:42
○ 2026-07-07 16:22:26

○A188.114.97.02026-04-09 → 2026-06-09 · 7 obs

○ 2026-03-30 09:21:02
● 2026-04-09 12:00:08
● 2026-05-09 22:30:36
○ 2026-06-01 13:24:18
● 2026-06-06 20:04:02
● 2026-06-09 12:33:42
○ 2026-07-07 16:22:26

●A2606:4700:3030::ac43:8ae42026-07-07 → 2026-07-07 · 2 obs

○ 2026-06-09 12:33:42
● 2026-07-07 16:22:26

●A2606:4700:3034::6815:4efa2026-07-07 → 2026-07-07 · 2 obs

○ 2026-06-09 12:33:42
● 2026-07-07 16:22:26

○A2606:4700:3036::6815:4efa2026-02-16 → 2026-06-01 · 8 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-03-30 09:21:02
○ 2026-04-09 12:00:08
○ 2026-05-09 22:30:36
● 2026-06-01 13:24:18
○ 2026-06-06 20:04:02
○ 2026-07-07 16:22:26

○A2606:4700:3037::ac43:8ae42026-02-16 → 2026-06-01 · 8 obs

○ 2018-05-17 12:53:28
● 2026-02-16 07:52:36
● 2026-03-30 09:21:02
○ 2026-04-09 12:00:08
○ 2026-05-09 22:30:36
● 2026-06-01 13:24:18
○ 2026-06-06 20:04:02
○ 2026-07-07 16:22:26

○A2a06:98c1:3120::2026-04-09 → 2026-06-09 · 7 obs

○ 2026-03-30 09:21:02
● 2026-04-09 12:00:08
● 2026-05-09 22:30:36
○ 2026-06-01 13:24:18
● 2026-06-06 20:04:02
● 2026-06-09 12:33:42
○ 2026-07-07 16:22:26

○A2a06:98c1:3121::2026-04-09 → 2026-06-09 · 7 obs

○ 2026-03-30 09:21:02
● 2026-04-09 12:00:08
● 2026-05-09 22:30:36
○ 2026-06-01 13:24:18
● 2026-06-06 20:04:02
● 2026-06-09 12:33:42
○ 2026-07-07 16:22:26

○A77.87.199.1722018-05-17 → 2018-05-17 · 3 obs

● 2018-05-17 12:53:28
○ 2026-02-16 07:52:36
○ 2026-07-07 16:22:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	e.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, f.gtld-servers.net...	-
forexcrypt.com	kurt.ns.cloudflare.com, heidi.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.236

NS records: kurt.ns.cloudflare.com, heidi.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for forexcrypt.com (unsigned zone)

⏱️ Timing

Total: 2369ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.138.228, 104.21.78.250`
AAAA	2	`2606:4700:3030::ac43:8ae4, 2606:4700:3034::6815:4efa`
NS	2	`heidi.ns.cloudflare.com, kurt.ns.cloudflare.com`
MX	2	`smtp.secureserver.net (pri: 0), mailstore1.secureserver.net (pri: 10)`
TXT	2	`D5527628, v=spf1 include:secureserver.net -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`heidi.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (kurt.ns.cloudflare.com, kurt.ns.cloudflare.com, kurt.ns.cloudflare.com...)

Analysis

IP Addresses

forexcrypt.com directs to four IP numbers, which are 104.21.78.250, 172.67.138.228, 2606:4700:3030::ac43:8ae4 and 2606:4700:3034::6815:4efa.

bangalayarq.click, drmichaelijacobs.com, hfslsm.net and two other host names share IP numbers with forexcrypt.com.

Name Servers

forexcrypt.com is served by two delegated name servers, heidi.ns.cloudflare.com and kurt.ns.cloudflare.com.

forexcrypt.com and other domains — seostdmc.com, arc-instruments.co.uk and bdithost.com among them — share the same NS delegation.

There is at least partial name server overlap between forexcrypt.com and other domains — ncwhwl.com, doramalivey.ru, sultengterkini.com and two more among them.

These name servers are routinely deployed together with the name servers miki.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

heidi.ns.cloudflare.com carries IP addresses 108.162.194.236, 162.159.38.236 and 172.64.34.236, with 3 other addresses beyond those.

kurt.ns.cloudflare.com carries IP addresses 108.162.193.193, 172.64.33.193 and 173.245.59.193, with 3 other addresses beyond those.

Mail Servers

Mail for forexcrypt.com is handled by two mail servers — mailstore1.secureserver.net and smtp.secureserver.net.

forexcrypt.com uses an identical mail server configuration to several other domains — among them bahshato.com, affinityinfosoft.net, cmilian.com and two more.

forexcrypt.com and other domains — stanfordgsb.org for instance — share at least some mail servers.

mailstore1.secureserver.net points to 216.69.141.78, 216.69.141.114 and 216.69.141.162. smtp.secureserver.net points to 216.69.141.71, 216.69.141.84 and 216.69.141.113. Both hosts resolve to three IP numbers.