s9security.com - dns.ninja

`s9security.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:5040^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:aebc^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.80.64^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.174.188^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dara.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a5b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dara.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c05b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dara.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:205b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dara.ns.cloudflare.com`
		A	108.162.192.91^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dara.ns.cloudflare.com`
		A	172.64.32.91^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dara.ns.cloudflare.com`
		A	173.245.58.91^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dara.ns.cloudflare.com`
NS	`marek.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bca^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ca^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`marek.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ca^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`marek.ns.cloudflare.com`
		A	108.162.193.202^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	172.64.33.202^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
		A	173.245.59.202^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marek.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:4025:402::1b^{🇳🇱 Google2a00:1450:4025::/48}
			PTR	`rb-in-f27.1e100.net`
		A	142.250.102.26^{🇺🇸 Google142.250.102.0/24}
			PTR	`rb-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:4013:c1e::1b^{🇳🇱 Google2a00:1450:4013::/48}
			PTR	`yugrqzs-in-f27.1e100.net`
		A	192.178.213.26^{🇺🇸 Google192.178.213.0/24}
			PTR	`yugrqzs-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4001:c21::1a^{🇩🇪 Google2a00:1450:4001::/48}
			PTR	`lcfrai-in-f26.1e100.net`
		A	142.251.127.27^{🇺🇸 Google142.251.127.0/24}
			PTR	`lcfrai-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4025:c01::1a^{🇵🇱 Google2a00:1450:4025::/48}
			PTR	`rd-in-f26.1e100.net`
		A	142.250.147.27^{🇺🇸 Google142.250.147.0/24}
			PTR	`rd-in-f27.1e100.net`
TXT	`google-site-verification=VS8U9ITfT7LvJAfXk0Hq8MV3WmkjlZRd_VkLxkSQCMU`
TXT	`google-site-verification=lrrIMz3Mza12gHC1WFEog7SYYA0tHy3iNPHT3ZtVPBo`
TXT	`v=spf1 include:dc-aa8e722993._spfm.s9security.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.80.64, 172.67.174.188
		IPv6 hints	2606:4700:3031::6815:5040, 2606:4700:3036::ac43:aebc
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=5, name=cloudflare-ech.com
SOA	`dara.ns.cloudflare.com`dns@cloudflare.com serial=2406626107

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1781896520

Same first word

s9security.com

DNS History

20 records (11 active, 9 former)

●NSdara.ns.cloudflare.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●NSmarek.ns.cloudflare.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

○NSns49.domaincontrol.com2026-03-27 → 2026-06-19 · 2 obs

○ 2026-03-27 22:25:00
○ 2026-06-19 19:30:24

○NSns50.domaincontrol.com2026-03-27 → 2026-06-19 · 2 obs

○ 2026-03-27 22:25:00
○ 2026-06-19 19:30:24

●MXalt1.aspmx.l.google.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●MXalt2.aspmx.l.google.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●MXalt3.aspmx.l.google.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●MXalt4.aspmx.l.google.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●MXaspmx.l.google.com2026-03-27 → 2026-06-19 · 2 obs

● 2026-03-27 22:25:00
● 2026-06-19 19:30:24

●A104.21.80.642026-03-27 → 2026-06-19 · 4 obs

● 2026-03-27 22:25:00
○ 2026-03-31 00:38:38
● 2026-05-06 04:50:42
● 2026-06-19 19:30:24

○A15.197.142.1732026-03-27 → 2026-06-19 · 2 obs

○ 2026-03-27 22:25:00
○ 2026-06-19 19:30:24

●A172.67.174.1882026-03-27 → 2026-06-19 · 4 obs

● 2026-03-27 22:25:00
○ 2026-03-31 00:38:38
● 2026-05-06 04:50:42
● 2026-06-19 19:30:24

○A188.114.96.02026-03-31 → 2026-03-31 · 4 obs

○ 2026-03-27 22:25:00
● 2026-03-31 00:38:38
○ 2026-05-06 04:50:42
○ 2026-06-19 19:30:24

○A188.114.97.02026-03-31 → 2026-03-31 · 4 obs

○ 2026-03-27 22:25:00
● 2026-03-31 00:38:38
○ 2026-05-06 04:50:42
○ 2026-06-19 19:30:24

●A2606:4700:3031::6815:50402026-03-27 → 2026-06-19 · 4 obs

● 2026-03-27 22:25:00
○ 2026-03-31 00:38:38
● 2026-05-06 04:50:42
● 2026-06-19 19:30:24

●A2606:4700:3036::ac43:aebc2026-03-27 → 2026-06-19 · 4 obs

● 2026-03-27 22:25:00
○ 2026-03-31 00:38:38
● 2026-05-06 04:50:42
● 2026-06-19 19:30:24

○A2a06:98c1:3120::2026-03-31 → 2026-03-31 · 4 obs

○ 2026-03-27 22:25:00
● 2026-03-31 00:38:38
○ 2026-05-06 04:50:42
○ 2026-06-19 19:30:24

○A2a06:98c1:3121::2026-03-31 → 2026-03-31 · 4 obs

○ 2026-03-27 22:25:00
● 2026-03-31 00:38:38
○ 2026-05-06 04:50:42
○ 2026-06-19 19:30:24

○A3.33.152.1472026-03-27 → 2026-06-19 · 2 obs

○ 2026-03-27 22:25:00
○ 2026-06-19 19:30:24

○A38.242.226.2492026-03-27 → 2026-06-19 · 2 obs

○ 2026-03-27 22:25:00
○ 2026-06-19 19:30:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
s9security.com	dara.ns.cloudflare.com, marek.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.91

NS records: dara.ns.cloudflare.com, marek.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for s9security.com (unsigned zone)

⏱️ Timing

Total: 166ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.80.64, 172.67.174.188`
AAAA	2	`2606:4700:3036::ac43:aebc, 2606:4700:3031::6815:5040`
NS	2	`dara.ns.cloudflare.com, marek.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	3	`google-site-verification=VS8U9ITfT7LvJAf, google-site-verification=lrrIMz3Mza12gHC...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dara.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dara.ns.cloudflare.com, dara.ns.cloudflare.com, dara.ns.cloudflare.com...)

Analysis

IP Addresses

s9security.com directs to four IP numbers, which are 104.21.80.64, 172.67.174.188, 2606:4700:3031::6815:5040 and 2606:4700:3036::ac43:aebc.

wtc2014.org, www.kriegerwatch.com, eltefoci.hu plus two other host names have IP numbers in common with s9security.com.

Name Servers

s9security.com uses two name servers for its delegation: dara.ns.cloudflare.com and marek.ns.cloudflare.com.

The name server configuration of s9security.com is shared with other domains, for instance (0x6469636b)ies.co.za, transense.co.uk, finecigars.pro and two others.

There is at least partial name server overlap between s9security.com and other domains — ballemedia.com, cvsouth.org, makeittothemoon.com and two more among them.

These name servers are routinely deployed together with the name servers coen.ns.cloudflare.com.

Hosts with 6 IP addresses each:

Hostname dara.ns.cloudflare.com directs to 108.162.192.91, 172.64.32.91 and 173.245.58.91 along with 3 other IP addresses.

Hostname marek.ns.cloudflare.com directs to 108.162.193.202, 172.64.33.202 and 173.245.59.202 along with 3 other IP addresses.

Mail Servers

Five mail servers handle s9security.com: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

At least some of the mail servers used by s9security.com are shared with other domains: pulselocalhq.com, ns500742.ns500671.ns500671.ns500742.ns500671.ns500671.ns500688.ns500678.ns500291.ns500678.ns500688.ns500671.ns500649.lustychickser.com, ns500671.ns500754.ns500671.ns500731.ns500671.ns500731.ns500671.ns500705.ns500731.ns500704.ns500704.ns500688.ns500291.ns500671.tenderladiesbz.com and two others among them.

These mail servers often appear in conjunction with the mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com.

Host names pointing to two IP addresses:

aspmx.l.google.com directs traffic to 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt1.aspmx.l.google.com directs traffic to 142.250.102.26 and 2a00:1450:4025:402::1b.

alt2.aspmx.l.google.com directs traffic to 192.178.213.26 and 2a00:1450:4013:c1e::1b.

alt3.aspmx.l.google.com directs traffic to 142.251.127.27 and 2a00:1450:4001:c21::1a.

alt4.aspmx.l.google.com directs traffic to 142.250.147.27 and 2a00:1450:4025:c01::1a.