is.under-attack.com - dns.ninja

is.under-attack.com

DNSSEC⚠️ Not signed
A15.156.222.2πŸ‡¨πŸ‡¦ Amazon15.156.0.0/15 EC2 YUL prefix
PTRec2-15-156-222-2.ca-central-1.compute.amazonaws.com
A35.182.187.92πŸ‡¨πŸ‡¦ Amazon35.182.0.0/15 EC2 YUL prefix
NSip-172-26-1-146.us-east-2.compute.internal ⭐
NSns1.power-dns.com ⚠️ Not in parent delegation
A13.58.50.225πŸ‡ΊπŸ‡Έ Amazon13.58.0.0/15 EC2 CMH prefix
PTRec2-13-58-50-225.us-east-2.compute.amazonaws.com
NSns2.power-dns.com ⚠️ Not in parent delegation
A188.166.142.159πŸ‡³πŸ‡± DIGITALOCEAN188.166.140.0/22 DigitalOcean
NSns3.power-dns.com ⚠️ Not in parent delegation
A139.59.220.175πŸ‡ΈπŸ‡¬ DIGITALOCEAN139.59.220.0/22 DigitalOcean
MXmx1.ewebdevelopment.com ⭐
A159.203.54.48πŸ‡¨πŸ‡¦ DIGITALOCEAN159.203.52.0/22 DigitalOcean
MXmx2.ewebdevelopment.com(5)
A188.166.142.73πŸ‡³πŸ‡± DIGITALOCEAN188.166.140.0/22 DigitalOcean
TXTv=spf1 include:u2069692.wl.sendgrid.net -all
TXT91f786e2661531d62a5e4bf8dc941c30c7391ed6
TXT934c3bfaa10e7d053ed251a82e3f4a82d19da885
TXTafternic-verification-VKoxaZkQawZ8VVht35n43c
SOAip-172-26-1-146.us-east-2.compute.internalhostmaster@power-dns.com 2025-01-15 #1

under-attack.com

DNSSEC⚠️ Not signed
A15.156.222.2πŸ‡¨πŸ‡¦ Amazon15.156.0.0/15 EC2 YUL prefix
A35.182.187.92πŸ‡¨πŸ‡¦ Amazon35.182.0.0/15 EC2 YUL prefix
NSip-172-26-1-146.us-east-2.compute.internal ⭐
NSns1.power-dns.com
NSns2.power-dns.com
NSns3.power-dns.com
MXmx1.ewebdevelopment.com ⭐
MXmx2.ewebdevelopment.com(5)
TXT91f786e2661531d62a5e4bf8dc941c30c7391ed6
TXT934c3bfaa10e7d053ed251a82e3f4a82d19da885
TXTafternic-verification-VKoxaZkQawZ8VVht35n43c
TXTv=spf1 include:u2069692.wl.sendgrid.net -all
SOAip-172-26-1-146.us-east-2.compute.internalhostmaster@power-dns.com 2025-01-15 #1

Subdomains

Same first word

Similar names

DNS History

15 records (8 active, 7 former)

NSip-172-26-1-146.us-east-2.compute.internalns1.power-dns.comns2.power-dns.comns3.power-dns.comsingapore.power-dns.comMXmx1.ewebdevelopment.commx2.ewebdevelopment.comA15.156.222.235.182.187.9215.157.197.23316.52.221.2616.54.110.2253.97.47.1503.98.250.1373.99.90.156
●NSip-172-26-1-146.us-east-2.compute.internal2026-02-20 β†’ 2026-07-25 Β· 5 obs
● 2026-02-20 05:05:10
● 2026-02-20 06:14:06
β—‹ 2026-04-18 07:57:40
β—‹ 2026-05-12 09:34:56
● 2026-07-25 17:23:54
●NSns1.power-dns.com2026-02-20 β†’ 2026-07-25 Β· 2 obs
● 2026-02-20 05:05:10
● 2026-07-25 17:23:54
●NSns2.power-dns.com2026-02-20 β†’ 2026-07-25 Β· 2 obs
● 2026-02-20 05:05:10
● 2026-07-25 17:23:54
●NSns3.power-dns.com2026-02-20 β†’ 2026-07-25 Β· 2 obs
● 2026-02-20 05:05:10
● 2026-07-25 17:23:54
β—‹NSsingapore.power-dns.com2026-04-18 β†’ 2026-05-12 Β· 4 obs
β—‹ 2026-02-20 06:14:06
● 2026-04-18 07:57:40
● 2026-05-12 09:34:56
β—‹ 2026-07-25 17:23:54
●MXmx1.ewebdevelopment.com2026-02-20 β†’ 2026-07-25 Β· 2 obs
● 2026-02-20 05:05:10
● 2026-07-25 17:23:54
●MXmx2.ewebdevelopment.com2026-02-20 β†’ 2026-07-25 Β· 2 obs
● 2026-02-20 05:05:10
● 2026-07-25 17:23:54
●A15.156.222.22026-07-25 β†’ 2026-07-25 Β· 2 obs
β—‹ 2026-05-12 09:34:56
● 2026-07-25 17:23:54
β—‹A15.157.197.2332026-05-12 β†’ 2026-05-12 Β· 3 obs
β—‹ 2026-04-18 07:57:40
● 2026-05-12 09:34:56
β—‹ 2026-07-25 17:23:54
β—‹A16.52.221.262026-05-12 β†’ 2026-05-12 Β· 3 obs
β—‹ 2026-04-18 07:57:40
● 2026-05-12 09:34:56
β—‹ 2026-07-25 17:23:54
β—‹A16.54.110.2252026-04-18 β†’ 2026-04-18 Β· 4 obs
β—‹ 2026-02-20 06:14:06
● 2026-04-18 07:57:40
β—‹ 2026-05-12 09:34:56
β—‹ 2026-07-25 17:23:54
β—‹A3.97.47.1502026-02-20 β†’ 2026-02-20 Β· 4 obs
● 2026-02-20 05:05:10
● 2026-02-20 06:14:06
β—‹ 2026-04-18 07:57:40
β—‹ 2026-07-25 17:23:54
β—‹A3.98.250.1372026-02-20 β†’ 2026-02-20 Β· 4 obs
● 2026-02-20 05:05:10
● 2026-02-20 06:14:06
β—‹ 2026-04-18 07:57:40
β—‹ 2026-07-25 17:23:54
β—‹A3.99.90.1562026-04-18 β†’ 2026-04-18 Β· 4 obs
β—‹ 2026-02-20 06:14:06
● 2026-04-18 07:57:40
β—‹ 2026-05-12 09:34:56
β—‹ 2026-07-25 17:23:54
●A35.182.187.922026-07-25 β†’ 2026-07-25 Β· 2 obs
β—‹ 2026-05-12 09:34:56
● 2026-07-25 17:23:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
under-attack.comns1.power-dns.com, ns2.power-dns.com, ns3.power-dns.com3 records

βœ… Authoritative Response

Server:13.58.50.225

NS records: ns1.power-dns.com, ns2.power-dns.com, ns3.power-dns.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for under-attack.com (unsigned zone)

⏱️ Timing

Total: 791ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A215.156.222.2, 35.182.187.92
NS3ns2.power-dns.com, ns1.power-dns.com...
MX2mx1.ewebdevelopment.com (pri: 1), mx2.ewebdevelopment.com (pri: 5)
TXT4v=spf1 include:u2069692.wl.sendgrid.net , 91f786e2661531d62a5e4bf8dc941c30c7391ed6...
SOA1ip-172-26-1-146.us-east-2.compute.intern

πŸ“Œ Glue Records Collected

Total: 3

Out-of-bailiwick: 3 (ns1.power-dns.com, ns2.power-dns.com, ns3.power-dns.com)

Analysis

Hierarchy

is.under-attack.com serves as the parent of cloverfield.is.under-attack.com.

IP Addresses

is.under-attack.com directs to two IP numbers, 15.156.222.2 and 35.182.187.92

personal-web.com, janing.com, vision123.com and two other host names share IP numbers with is.under-attack.com.

Name Servers

The authoritative name servers for is.under-attack.com are ns1.power-dns.com, ns2.power-dns.com, ns3.power-dns.com and ip-172-26-1-146.us-east-2.compute.internal.

is.under-attack.com has at least partial name server overlap with other domains, such as achanti.com, bread-machine.com, i-sg.com and two others.

It is common to see these name servers used together with name servers singapore.power-dns.com and amsterdam.power-dns.com.

Three hostnames, one IP address apiece: ns1.power-dns.com resolves to 13.58.50.225, ns2.power-dns.com resolves to 188.166.142.159 and ns3.power-dns.com resolves to 139.59.220.175.

Mail Servers

Mail for is.under-attack.com is handled by two mail servers β€” mx1.ewebdevelopment.com and mx2.ewebdevelopment.com.

is.under-attack.com uses an identical mail server configuration to several other domains β€” among them duneweb.com, eu-s.com, system-update.com and two more.

mx1.ewebdevelopment.com directs to 159.203.54.48 and mx2.ewebdevelopment.com directs to 188.166.142.73; each host name points to exactly one IP number.