usdfakes.com - dns.ninja

`usdfakes.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:51cc^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:a44b^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.81.204^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.164.75^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`candy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`candy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`candy.ns.cloudflare.com`
		A	108.162.192.79^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	172.64.32.79^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	173.245.58.79^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
NS	`clay.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b58^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clay.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c158^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`clay.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2158^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`clay.ns.cloudflare.com`
		A	108.162.193.88^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clay.ns.cloudflare.com`
		A	172.64.33.88^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clay.ns.cloudflare.com`
		A	173.245.59.88^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clay.ns.cloudflare.com`
MX	`_dc-mx.be65574a58cc.usdfakes.com` ⭐
		A	78.40.143.191^{🇧🇬 SHINJIRU-MY-AS-AP78.40.143.0/24}
			PTR	`server1.kamon.la`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.81.204, 172.67.164.75
		IPv6 hints	2606:4700:3034::6815:51cc, 2606:4700:3035::ac43:a44b
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=142, name=cloudflare-ech.com
SOA	`candy.ns.cloudflare.com`dns@cloudflare.com serial=2406049237

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1782874286

⚠️ On DNS blocklist: tif

Same first word

usdfakes.com

DNS History

8 records (7 active, 1 former)

●NScandy.ns.cloudflare.com2026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

●NSclay.ns.cloudflare.com2026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

●MX_dc-mx.be65574a58cc.usdfakes.com2026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

●A104.21.81.2042026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

●A172.67.164.752026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

○A2606:4700:3033::ac43:a44b2026-03-04 → 2026-06-18 · 3 obs

● 2026-03-04 07:15:22
● 2026-06-18 09:08:04
○ 2026-07-01 03:08:02

●A2606:4700:3034::6815:51cc2026-03-04 → 2026-07-01 · 2 obs

● 2026-03-04 07:15:22
● 2026-07-01 03:08:02

●A2606:4700:3035::ac43:a44b2026-07-01 → 2026-07-01 · 2 obs

○ 2026-06-18 09:08:04
● 2026-07-01 03:08:02

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, g.gtld-servers.net, e.gtld-servers.net, d.gtld-servers.net...	-
usdfakes.com	candy.ns.cloudflare.com, clay.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:172.64.32.79

NS records: candy.ns.cloudflare.com, clay.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for usdfakes.com (unsigned zone)

⏱️ Timing

Total: 381ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.81.204, 172.67.164.75`
AAAA	2	`2606:4700:3034::6815:51cc, 2606:4700:3035::ac43:a44b`
NS	2	`candy.ns.cloudflare.com, clay.ns.cloudflare.com`
MX	1	`_dc-mx.be65574a58cc.usdfakes.com (pri: 0`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`candy.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (candy.ns.cloudflare.com, candy.ns.cloudflare.com, candy.ns.cloudflare.com...)

Analysis

IP Addresses

usdfakes.com resolves to four IP addresses: 104.21.81.204, 172.67.164.75, 2606:4700:3034::6815:51cc and 2606:4700:3035::ac43:a44b.

pvpmania.eu, calian.xyz, www.sology.net and two other host names share IP numbers with usdfakes.com.

Name Servers

DNS delegation for usdfakes.com points to two name servers: candy.ns.cloudflare.com and clay.ns.cloudflare.com.

usdfakes.com uses the same name servers as several other domains — among them poptraftracker.com, svlpackersandmovers.com, cloudflare-6s0.pages.dev and two more.

usdfakes.com partially shares its NS delegation with several other domains, including scammerwatch.com, eatonautorepair.com, sekertairi.com and two others.

These name servers regularly co-occur with the name servers ulla.ns.cloudflare.com, evangeline.ns.cloudflare.com and henry.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

candy.ns.cloudflare.com has IP addresses 108.162.192.79, 172.64.32.79 and 173.245.58.79, plus 3 other.

clay.ns.cloudflare.com has IP addresses 108.162.193.88, 172.64.33.88 and 173.245.59.88, plus 3 other.

Mail Servers

Mail for usdfakes.com is handled by a single mail server, _dc-mx.be65574a58cc.usdfakes.com.

_dc-mx.be65574a58cc.usdfakes.com has exactly one IP number: 78.40.143.191.