scanfraud.com - dns.ninja

`scanfraud.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:22af^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:a38d^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.34.175^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.163.141^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`deb.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a5c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`deb.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c05c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`deb.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:205c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`deb.ns.cloudflare.com`
		A	108.162.192.92^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`deb.ns.cloudflare.com`
		A	172.64.32.92^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`deb.ns.cloudflare.com`
		A	173.245.58.92^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`deb.ns.cloudflare.com`
NS	`derek.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b9a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`derek.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c19a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`derek.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:219a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`derek.ns.cloudflare.com`
		A	108.162.193.154^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`derek.ns.cloudflare.com`
		A	172.64.33.154^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`derek.ns.cloudflare.com`
		A	173.245.59.154^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`derek.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c21::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`pe-in-f27.1e100.net`
		A	64.233.180.27^{🇺🇸 Google64.233.180.0/24}
			PTR	`on-in-f27.1e100.net`
			PTR	`pe-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c14::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	192.178.234.27^{🇺🇸 Google192.178.0.0/15}
			PTR	`ncsclj-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1a^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f26.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1a^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f26.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`google-site-verification=ZuVlP71jErXwBahRXuvTSc56exRsoVxNrZCdIrP_ClA`
TXT	`v=spf1 include:_spf.firehub.net include:_spf.google.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.34.175, 172.67.163.141
		IPv6 hints	2606:4700:3032::6815:22af, 2606:4700:3033::ac43:a38d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=58, name=cloudflare-ech.com
SOA	`deb.ns.cloudflare.com`dns@cloudflare.com serial=2410103252

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786355149

Same first word

scanfraud.com

Similar names

ufancards.com

DNS History

18 records (11 active, 7 former)

●NSdeb.ns.cloudflare.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●NSderek.ns.cloudflare.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

○NSns1.frhns.net2016-12-19 → 2017-11-22 · 4 obs

● 2016-12-19 03:09:06
● 2017-11-22 08:27:04
○ 2026-02-14 22:39:56
○ 2026-08-10 09:47:06

○NSns2.frhns.net2016-12-19 → 2017-11-22 · 4 obs

● 2016-12-19 03:09:06
● 2017-11-22 08:27:04
○ 2026-02-14 22:39:56
○ 2026-08-10 09:47:06

●MXalt1.aspmx.l.google.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●MXalt2.aspmx.l.google.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●MXalt3.aspmx.l.google.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●MXalt4.aspmx.l.google.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●MXaspmx.l.google.com2026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

○MXmail.firehub.net2016-12-19 → 2017-11-22 · 4 obs

● 2016-12-19 03:09:06
● 2017-11-22 08:27:04
○ 2026-02-14 22:39:56
○ 2026-08-10 09:47:06

●A104.21.34.1752026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

●A172.67.163.1412026-02-14 → 2026-08-10 · 3 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
● 2026-08-10 09:47:06

○A2606:4700:3031::6815:22af2026-02-14 → 2026-02-14 · 4 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
○ 2026-06-26 18:38:44
○ 2026-08-10 09:47:06

●A2606:4700:3032::6815:22af2026-06-26 → 2026-08-10 · 3 obs

○ 2026-02-14 22:39:56
● 2026-06-26 18:38:44
● 2026-08-10 09:47:06

●A2606:4700:3033::ac43:a38d2026-06-26 → 2026-08-10 · 3 obs

○ 2026-02-14 22:39:56
● 2026-06-26 18:38:44
● 2026-08-10 09:47:06

○A2606:4700:3037::ac43:a38d2026-02-14 → 2026-02-14 · 4 obs

○ 2017-11-22 08:27:04
● 2026-02-14 22:39:56
○ 2026-06-26 18:38:44
○ 2026-08-10 09:47:06

○A78.46.136.2062017-11-22 → 2017-11-22 · 4 obs

○ 2016-12-19 03:09:06
● 2017-11-22 08:27:04
○ 2026-02-14 22:39:56
○ 2026-08-10 09:47:06

○A78.46.136.2072016-12-19 → 2016-12-19 · 3 obs

● 2016-12-19 03:09:06
○ 2017-11-22 08:27:04
○ 2026-08-10 09:47:06

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, b.gtld-servers.net, l.gtld-servers.net, f.gtld-servers.net...	-
scanfraud.com	deb.ns.cloudflare.com, derek.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.154

NS records: deb.ns.cloudflare.com, derek.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for scanfraud.com (unsigned zone)

⏱️ Timing

Total: 204ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.34.175, 172.67.163.141`
AAAA	2	`2606:4700:3032::6815:22af, 2606:4700:3033::ac43:a38d`
NS	2	`deb.ns.cloudflare.com, derek.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`google-site-verification=ZuVlP71jErXwBah, v=spf1 include:_spf.firehub.net include:`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`deb.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (deb.ns.cloudflare.com, deb.ns.cloudflare.com, deb.ns.cloudflare.com...)

Analysis

IP Addresses

scanfraud.com resolves to four IP addresses: 104.21.34.175, 172.67.163.141, 2606:4700:3032::6815:22af and 2606:4700:3033::ac43:a38d.

bx.vc, mail.skryking.com, summit99advisory.digital and two other host names share IP numbers with scanfraud.com.

Name Servers

scanfraud.com uses two name servers for its delegation: deb.ns.cloudflare.com and derek.ns.cloudflare.com.

scanfraud.com uses the same name servers as several other domains — among them yella.ru, tenacityradio.com, lafatacellars.com and two more.

scanfraud.com partially shares its NS delegation with several other domains, including modo.net, yyya-nico.com, tcta.net and two others.

These name servers are regularly seen alongside lakas.ns.cloudflare.com and nolan.ns.cloudflare.com as name servers.

Hostnames that resolve to 6 IP addresses:

Hostname deb.ns.cloudflare.com directs to 108.162.192.92, 172.64.32.92 and 173.245.58.92 along with 3 other IP addresses.

Hostname derek.ns.cloudflare.com directs to 108.162.193.154, 172.64.33.154 and 173.245.59.154 along with 3 other IP addresses.

Mail Servers

scanfraud.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

scanfraud.com has at least partial mail server overlap with other domains such as ns500731.ns500671.ns500731.ns500754.ns500704.ns500704.ns500678.ns500678.ns500666.ns500666.ns500153.tenderladiesbz.com, ns500731.ns500742.ns500742.ns500754.ns500704.ns500705.ns500704.ns500704.ns500704.ns500649.ns500649.ns500688.ns500671.ns500649.lustychickser.com, ns500765.ns500765.ns500693.ns500699.ns500693.ns500693.ns500588.ns500699.ns500693.ns500693.ns500683.ns500699.ns500602.dtrkdll.com and two more.

These mail servers commonly co-occur with mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 others.

Hostnames that resolve to two IP addresses:

aspmx.l.google.com directs traffic to 64.233.180.27 and 2607:f8b0:4004:c21::1b.

alt1.aspmx.l.google.com directs traffic to 192.178.234.27 and 2800:3f0:4003:c14::1b.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com directs traffic to 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com directs traffic to 172.253.157.26 and 2a00:1450:400c:c23::1a.