document-auth.icu - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

document-auth.icu

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:28e6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3031::ac43:9d92πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.40.230Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.157.146πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSemely.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26d1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRemely.ns.cloudflare.com
A2803:f800:50::6ca2:c2d1πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRemely.ns.cloudflare.com
A2a06:98c1:50::ac40:22d1πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRemely.ns.cloudflare.com
A108.162.194.209πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRemely.ns.cloudflare.com
A162.159.38.209Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRemely.ns.cloudflare.com
A172.64.34.209πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRemely.ns.cloudflare.com
NSethan.ns.cloudflare.com
A2606:4700:58::a29f:2ce8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRethan.ns.cloudflare.com
A2803:f800:50::6ca2:c3e8πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRethan.ns.cloudflare.com
A2a06:98c1:50::ac40:23e8πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRethan.ns.cloudflare.com
A108.162.195.232πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRethan.ns.cloudflare.com
A162.159.44.232Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRethan.ns.cloudflare.com
A172.64.35.232πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRethan.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.40.230, 172.67.157.146
IPv6 hints2606:4700:3030::6815:28e6, 2606:4700:3031::ac43:9d92
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=102, name=cloudflare-ech.com
SOAemely.ns.cloudflare.comdns@cloudflare.com serial=2412178971

icu

DNSSECπŸ”’ Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.nic.icu
NSb.nic.icu
NSc.nic.icu
NSd.nic.icu
SOAns0.centralnic.nethostmaster@centralnic.net serial=1786881368
⚠️ On DNS blocklist: tif
⚠️ On DNS blocklist: spam-tlds

Same first word

DNS History

6 records (6 active, 0 former)

NSemely.ns.cloudflare.comethan.ns.cloudflare.comA104.21.40.230172.67.157.1462606:4700:3030::6815:28e62606:4700:3031::ac43:9d92
●NSemely.ns.cloudflare.com2026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56
●NSethan.ns.cloudflare.com2026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56
●A104.21.40.2302026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56
●A172.67.157.1462026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56
●A2606:4700:3030::6815:28e62026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56
●A2606:4700:3031::ac43:9d922026-06-24 β†’ 2026-08-16 Β· 2 obs
● 2026-06-24 12:44:08
● 2026-08-16 12:04:56

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
icua.nic.icu, b.nic.icu, c.nic.icu, d.nic.icu8 records
document-auth.icuethan.ns.cloudflare.com, emely.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.232

NS records: ethan.ns.cloudflare.com, emely.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for document-auth.icu (unsigned zone)

⏱️ Timing

Total: 359ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.157.146, 104.21.40.230
AAAA22606:4700:3031::ac43:9d92, 2606:4700:3030::6815:28e6
NS2emely.ns.cloudflare.com, ethan.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1emely.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a.nic.icu, b.nic.icu, c.nic.icu...)

Analysis

IP Addresses

document-auth.icu has four IP addresses: 104.21.40.230, 172.67.157.146, 2606:4700:3030::6815:28e6 and 2606:4700:3031::ac43:9d92.

Among the host names that share IP numbers with document-auth.icu are 89phwin.net, jeweller.pk, fromscotland.org.uk and two others.

Name Servers

Two name servers handle the delegation for document-auth.icu: emely.ns.cloudflare.com and ethan.ns.cloudflare.com.

document-auth.icu has the same name server delegation as a number of other domains, such as apacpay.com, best-wellnessoffers-shop.pages.dev, digitaloffice.website and two more.

document-auth.icu has at least partial name server overlap with other domains, such as hzgenyukj.com, www-fifa-com.website, endurancecarprotection.com and two others.

It is common to see these name servers used together with name servers garret.ns.cloudflare.com and norman.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

emely.ns.cloudflare.com resolves to 108.162.194.209, 162.159.38.209 and 172.64.34.209 among others, with 3 other IP addresses in total.

ethan.ns.cloudflare.com resolves to 108.162.195.232, 162.159.44.232 and 172.64.35.232 among others, with 3 other IP addresses in total.