educationforthinking.org - dns.ninja

`educationforthinking.org`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:5109^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:8898^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.81.9^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.136.152^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`donald.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b9e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`donald.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c19e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`donald.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:219e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`donald.ns.cloudflare.com`
		A	108.162.193.158^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`donald.ns.cloudflare.com`
		A	172.64.33.158^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`donald.ns.cloudflare.com`
		A	173.245.59.158^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`donald.ns.cloudflare.com`
NS	`sara.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a90^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c090^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sara.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2090^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sara.ns.cloudflare.com`
		A	108.162.192.144^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	172.64.32.144^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	173.245.58.144^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c2d::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`ry-in-f27.1e100.net`
		A	142.251.163.27^{🇺🇸 Google142.251.163.0/24}
			PTR	`wv-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1a^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f26.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1a^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f26.1e100.net`
		A	192.178.223.27^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`google-site-verification=jcfHAPxZw2fzXEVr6nHk9f-ymJTBLClvv0bFU4hKey4`
TXT	`v=spf1 a mx a:mailforwards.extendcp.co.uk ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.81.9, 172.67.136.152
		IPv6 hints	2606:4700:3032::6815:5109, 2606:4700:3035::ac43:8898
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=28, name=cloudflare-ech.com
SOA	`donald.ns.cloudflare.com`dns@cloudflare.com serial=2410111478

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1785893955

Same first word

educationforthinking.org

DNS History

25 records (11 active, 14 former)

●NSdonald.ns.cloudflare.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

○NSns.siteprotect.com2009-01-15 → 2009-01-15 · 3 obs

● 2009-01-15 12:08:36
○ 2015-05-17 06:33:30
○ 2026-08-05 02:03:48

○NSns1.isos.com2015-05-17 → 2017-10-20 · 5 obs

○ 2009-01-15 12:08:36
● 2015-05-17 06:33:30
● 2017-10-20 00:19:08
○ 2026-03-16 04:05:54
○ 2026-08-05 02:03:48

○NSns2.isos.com2015-05-17 → 2017-10-20 · 5 obs

○ 2009-01-15 12:08:36
● 2015-05-17 06:33:30
● 2017-10-20 00:19:08
○ 2026-03-16 04:05:54
○ 2026-08-05 02:03:48

○NSns2.siteprotect.com2009-01-15 → 2009-01-15 · 3 obs

● 2009-01-15 12:08:36
○ 2015-05-17 06:33:30
○ 2026-08-05 02:03:48

●NSsara.ns.cloudflare.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

●MXalt1.aspmx.l.google.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

●MXalt2.aspmx.l.google.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

●MXalt3.aspmx.l.google.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

●MXalt4.aspmx.l.google.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

●MXaspmx.l.google.com2026-03-16 → 2026-08-05 · 3 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-08-05 02:03:48

○MXmail.educationforthinking.org2015-05-17 → 2017-10-20 · 5 obs

○ 2009-01-15 12:08:36
● 2015-05-17 06:33:30
● 2017-10-20 00:19:08
○ 2026-03-16 04:05:54
○ 2026-08-05 02:03:48

○MXmx.educationforthinking.org2009-01-15 → 2009-01-15 · 3 obs

● 2009-01-15 12:08:36
○ 2015-05-17 06:33:30
○ 2026-08-05 02:03:48

●A104.21.81.92026-03-16 → 2026-08-05 · 9 obs

○ 2017-10-20 00:19:08
● 2026-03-16 04:05:54
● 2026-03-20 11:21:12
○ 2026-03-23 02:45:28
● 2026-04-29 21:36:24
● 2026-05-05 07:12:54
○ 2026-05-06 16:40:00
● 2026-05-13 15:47:32
● 2026-08-05 02:03:48

●A172.67.136.1522026-03-16 → 2026-08-05 · 9 obs

○A188.114.96.02026-03-23 → 2026-05-06 · 7 obs

○ 2026-03-20 11:21:12
● 2026-03-23 02:45:28
○ 2026-04-29 21:36:24
○ 2026-05-05 07:12:54
● 2026-05-06 16:40:00
○ 2026-05-13 15:47:32
○ 2026-08-05 02:03:48

○A188.114.97.02026-03-23 → 2026-05-06 · 7 obs

○ 2026-03-20 11:21:12
● 2026-03-23 02:45:28
○ 2026-04-29 21:36:24
○ 2026-05-05 07:12:54
● 2026-05-06 16:40:00
○ 2026-05-13 15:47:32
○ 2026-08-05 02:03:48

○A216.36.234.142009-01-15 → 2009-01-15 · 3 obs

● 2009-01-15 12:08:36
○ 2015-05-17 06:33:30
○ 2026-08-05 02:03:48

○A2606:4700:3031::ac43:88982026-03-16 → 2026-05-13 · 10 obs

●A2606:4700:3032::6815:51092026-06-27 → 2026-08-05 · 3 obs

○ 2026-05-13 15:47:32
● 2026-06-27 21:45:44
● 2026-08-05 02:03:48

○A2606:4700:3033::6815:51092026-03-16 → 2026-05-13 · 10 obs

●A2606:4700:3035::ac43:88982026-06-27 → 2026-08-05 · 3 obs

○ 2026-05-13 15:47:32
● 2026-06-27 21:45:44
● 2026-08-05 02:03:48

○A2a06:98c1:3120::2026-03-23 → 2026-05-06 · 7 obs

○ 2026-03-20 11:21:12
● 2026-03-23 02:45:28
○ 2026-04-29 21:36:24
○ 2026-05-05 07:12:54
● 2026-05-06 16:40:00
○ 2026-05-13 15:47:32
○ 2026-08-05 02:03:48

○A2a06:98c1:3121::2026-03-23 → 2026-05-06 · 7 obs

○ 2026-03-20 11:21:12
● 2026-03-23 02:45:28
○ 2026-04-29 21:36:24
○ 2026-05-05 07:12:54
● 2026-05-06 16:40:00
○ 2026-05-13 15:47:32
○ 2026-08-05 02:03:48

○A79.170.44.1002015-05-17 → 2017-10-20 · 5 obs

○ 2009-01-15 12:08:36
● 2015-05-17 06:33:30
● 2017-10-20 00:19:08
○ 2026-03-16 04:05:54
○ 2026-08-05 02:03:48

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org	-
educationforthinking.org	donald.ns.cloudflare.com, sara.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.144

NS records: donald.ns.cloudflare.com, sara.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for educationforthinking.org (unsigned zone)

⏱️ Timing

Total: 554ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.81.9, 172.67.136.152`
AAAA	2	`2606:4700:3032::6815:5109, 2606:4700:3035::ac43:8898`
NS	2	`donald.ns.cloudflare.com, sara.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`google-site-verification=jcfHAPxZw2fzXEV, v=spf1 a mx a:mailforwards.extendcp.co.u`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`donald.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

educationforthinking.org resolves to four IP addresses: 104.21.81.9, 172.67.136.152, 2606:4700:3032::6815:5109 and 2606:4700:3035::ac43:8898.

Two other host names, along with www.egafed.org.tr, www.id48686.com and karehealthcarellc.com, also share IP numbers with educationforthinking.org.

Name Servers

educationforthinking.org uses two name servers for its delegation: donald.ns.cloudflare.com and sara.ns.cloudflare.com.

educationforthinking.org shares its NS records with other domains, for example isos.com, famanon.co.uk, iseekcreative.com and two others.

educationforthinking.org has at least partial name server overlap with other domains, such as qifiluongroup88.buzz, letsupp.com, motorvillage.ie and two others.

It is common to see these name servers used together with name servers magnolia.ns.cloudflare.com and carter.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname donald.ns.cloudflare.com directs to 108.162.193.158, 172.64.33.158 and 173.245.59.158 along with 3 other IP addresses.

Hostname sara.ns.cloudflare.com directs to 108.162.192.144, 172.64.32.144 and 173.245.58.144 along with 3 other IP addresses.

Mail Servers

educationforthinking.org is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between educationforthinking.org and other domains, including ns500754.ns500742.ns500754.ns500754.ns500704.ns500688.ns500705.ns500671.ns500291.lusty(0x736c7574)z.com, ns500754.ns500731.ns500671.ns500731.ns500742.ns500731.ns500742.ns500754.ns500742.ns500688.ns500688.ns500671.ns500671.ns500291.ns500131.lustychickser.com, ns500731.ns500671.ns500742.ns500754.ns500688.ns500688.ns500705.ns500688.ns500704.ns500671.ns500671.ns500153.tenderladiesbz.com and two others.

These mail servers tend to appear in combination with mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 others.

Host names that have two IP addresses:

aspmx.l.google.com directs traffic to 142.251.163.27 and 2607:f8b0:4004:c2d::1b.

alt1.aspmx.l.google.com directs traffic to 108.177.123.27 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com directs traffic to 192.178.223.27 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com directs traffic to 172.253.157.26 and 2a00:1450:400c:c23::1b.