attacker.host - dns.ninja

attacker.host

DNSSEC⚠️ Not signed
NSdns1.registrar-servers.com ⭐
A2610:a1:1024::200πŸ‡ΊπŸ‡Έ MAINT-ID-120082610:a1:1024::/48 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
A156.154.132.200πŸ‡ΊπŸ‡Έ MAINT-ID-12008156.154.132.0/24 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
NSdns2.registrar-servers.com
A2610:a1:1025::200πŸ‡ΊπŸ‡Έ MAINT-ID-120082610:a1:1025::/48 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
A156.154.133.200πŸ‡ΊπŸ‡Έ MAINT-ID-12008156.154.133.0/24 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51πŸ‡ΊπŸ‡Έ NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
SOAdns1.registrar-servers.comhostmaster@registrar-servers.com serial=1573426663

host

DNSSECπŸ”’ Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1786046014

Same first word

Similar names

DNS History

13 records (7 active, 6 former)

2017201820192020202120222023202420252026NSdns1.registrar-servers.comdns2.registrar-servers.comns1.ipwned.rons2.ipwned.rons3.ipwned.rons4.ipwned.roMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.commail.attacker.hostA174.128.226.13
●NSdns1.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
●NSdns2.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
β—‹NSns1.ipwned.ro2016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48
β—‹NSns2.ipwned.ro2016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48
β—‹NSns3.ipwned.ro2016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48
β—‹NSns4.ipwned.ro2016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48
●MXeforward1.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
●MXeforward2.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
●MXeforward3.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
●MXeforward4.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
●MXeforward5.registrar-servers.com2026-04-01 β†’ 2026-08-06 Β· 3 obs
β—‹ 2016-12-13 00:32:06
● 2026-04-01 17:10:08
● 2026-08-06 20:03:48
β—‹MXmail.attacker.host2016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48
β—‹A174.128.226.132016-12-13 β†’ 2016-12-13 Β· 3 obs
● 2016-12-13 00:32:06
β—‹ 2026-04-01 17:10:08
β—‹ 2026-08-06 20:03:48

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
hostns10.trs-dns.info, ns01.trs-dns.net, ns01.trs-dns.com, ns10.trs-dns.org8 records
attacker.hostdns1.registrar-servers.com, dns2.registrar-servers.com-

βœ… Authoritative Response

Server:156.154.132.200

NS records: dns1.registrar-servers.com, dns2.registrar-servers.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attacker.host (unsigned zone)

⏱️ Timing

Total: 348ms | Queries: -

πŸ“„ Records

TypeCountSample Data
NS2dns1.registrar-servers.com, dns2.registrar-servers.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
SOA1dns1.registrar-servers.com hostmaster.re

πŸ“Œ Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.net...)

Analysis

Name Servers

Two name servers handle the delegation for attacker.host: dns1.registrar-servers.com and dns2.registrar-servers.com.

attacker.host shares its name server setup with other domains, including velvourshop.com, dbuilt.com, hollywoodearth.com and two others.

The name servers of attacker.host overlap at least partially with those of other domains β€” among them sofiecat.com, hotforexoffers.com, kovak.net and two more.

The name servers dns3.registrar-servers.com, dns4.registrar-servers.com and dns5.registrar-servers.com are commonly seen alongside these name servers.

dns1.registrar-servers.com and dns2.registrar-servers.com both carry two IP addresses. The A records for dns1.registrar-servers.com are 156.154.132.200 and 2610:a1:1024::200; the A records for dns2.registrar-servers.com are 156.154.133.200 and 2610:a1:1025::200.

Mail Servers

Five mail servers handle attacker.host: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

attacker.host shares mail servers β€” at least in part β€” with other domains, including logicart.biz, zipzip.us, mancla.com and two others.

These mail servers are frequently paired with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names pointing to a single IP address:

The hostname eforward1.registrar-servers.com resolves to 162.255.118.51.

The hostname eforward2.registrar-servers.com resolves to 162.255.118.52.

The hostname eforward3.registrar-servers.com resolves to 162.255.118.51.

The hostname eforward4.registrar-servers.com resolves to 162.255.118.52.

The hostname eforward5.registrar-servers.com resolves to 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com are host names that all point to 162.255.118.51.

eforward2.registrar-servers.com along with eforward4.registrar-servers.com each resolve to 162.255.118.52 IP addresses.