attacker.network - dns.ninja

attacker.network

DNSSECโš ๏ธ Not signed
A216.40.34.41๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS216.40.34.0/24
NSns1.hover.com โญ
A2604:4000:0:d:216:40:47:26๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS2604:4000::/48 -BRA-IPV6-BLK1.1/NET-2604:4000
PTRns1.hover.com
A216.40.47.26๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS216.40.47.0/24 -BRA-BLK1.4/NET-216-40-47-0
PTRns1.hover.com
NSns2.hover.com
A2604:4000:2800:d:64:99:148:13๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS-32604:4000:2800::/37 Tucows.com Co.
PTRns2.hover.com
A64.98.148.13๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS-364.98.144.0/20 Tucows.com Co.
PTRns2.hover.com
MXmx.hover.com.cust.hostedemail.com โญ
A216.40.42.4๐Ÿ‡จ๐Ÿ‡ฆ TUCOWS216.40.32.0/20 Tucows International
PTRmx.hostedemail.com
SOAns1.hover.comdnsmaster@hover.com serial=1720468809

network

DNSSEC๐Ÿ”’ Signed (DS record present)
NSv0n0.nic.network โญ
NSv0n1.nic.network
NSv0n2.nic.network
NSv0n3.nic.network
NSv2n0.nic.network
NSv2n1.nic.network
SOAv0n0.nic.networkhostmaster@donuts.email serial=1782670641

Same first word

Similar names

DNS History

10 records (4 active, 6 former)

2017201820192020202120222023202420252026NSns1.hover.comns2.hover.comns01.cashparking.comMXmx.hover.com.cust.hostedemail.com10mailstore1.secureserver.netsmtp.secureserver.netA216.40.34.41184.168.221.96
โ—‹NSns01.cashparking.com2016-12-10 โ†’ 2017-09-21 ยท 3 obs
โ— 2016-12-10 20:24:16
โ— 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—NSns1.hover.com2026-06-28 โ†’ 2026-06-28 ยท 2 obs
โ—‹ 2017-09-21 16:58:42
โ— 2026-06-28 18:38:52
โ—NSns2.hover.com2026-06-28 โ†’ 2026-06-28 ยท 2 obs
โ—‹ 2017-09-21 16:58:42
โ— 2026-06-28 18:38:52
โ—‹MX(root)2017-09-21 โ†’ 2017-09-21 ยท 3 obs
โ—‹ 2016-12-10 20:24:16
โ— 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—‹MX102017-09-21 โ†’ 2017-09-21 ยท 3 obs
โ—‹ 2016-12-10 20:24:16
โ— 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—‹MXmailstore1.secureserver.net2016-12-10 โ†’ 2016-12-10 ยท 3 obs
โ— 2016-12-10 20:24:16
โ—‹ 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—MXmx.hover.com.cust.hostedemail.com2026-06-28 โ†’ 2026-06-28 ยท 2 obs
โ—‹ 2017-09-21 16:58:42
โ— 2026-06-28 18:38:52
โ—‹MXsmtp.secureserver.net2016-12-10 โ†’ 2016-12-10 ยท 3 obs
โ— 2016-12-10 20:24:16
โ—‹ 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—‹A184.168.221.962016-12-10 โ†’ 2017-09-21 ยท 3 obs
โ— 2016-12-10 20:24:16
โ— 2017-09-21 16:58:42
โ—‹ 2026-06-28 18:38:52
โ—A216.40.34.412026-06-28 โ†’ 2026-06-28 ยท 2 obs
โ—‹ 2017-09-21 16:58:42
โ— 2026-06-28 18:38:52

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
networkv0n0.nic.network, v0n1.nic.network, v0n2.nic.network, v0n3.nic.network...12 records
attacker.networkns1.hover.com, ns2.hover.com-

โœ… Authoritative Response

Server:64.98.148.13

NS records: ns1.hover.com, ns2.hover.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for attacker.network (unsigned zone)

โฑ๏ธ Timing

Total: 479ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A1216.40.34.41
NS2ns2.hover.com, ns1.hover.com
MX1mx.hover.com.cust.hostedemail.com (pri:
SOA1ns1.hover.com dnsmaster.hover.com

๐Ÿ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.network, v0n0.nic.network, v0n1.nic.network...)

Analysis

IP Addresses

attacker.network resolves to one IP address: 216.40.34.41.

comingofagenovels.com, getexercises.com, ns1a.hover.com and two other host names share IP numbers with attacker.network.

Name Servers

Two name servers handle the delegation for attacker.network: ns1.hover.com and ns2.hover.com.

attacker.network uses the same name servers as several other domains โ€” among them mijash3.com, clubsocialdc.com, jobling.org and two more.

The name servers of attacker.network overlap at least partially with those of other domains โ€” among them poipounders.com, gracetyler.com, lc10k.com and two more.

These name servers commonly appear in combination with the name servers ns3.hover.com.

ns1.hover.com and ns2.hover.com both carry two IP addresses. The A records for ns1.hover.com are 216.40.47.26 and 2604:4000:0:d:216:40:47:26; the A records for ns2.hover.com are 64.98.148.13 and 2604:4000:2800:d:64:99:148:13.

Mail Servers

Mail for attacker.network is handled by a single mail server, mx.hover.com.cust.hostedemail.com.

attacker.network uses an identical mail server configuration to several other domains โ€” among them quinteros.ca, mcs-billing.com, morgrowe.com and two more.

The mail servers for attacker.network overlap at least partially with those of other domains, including passweird.com and retailfieldmetrics.com.

The mail servers mxa.mailgun.org and mxb.mailgun.org are commonly paired with these mail servers.

mx.hover.com.cust.hostedemail.com carries a single IP number, which is 216.40.42.4.