ncforensics.org - dns.ninja

ncforensics.org

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:9a46πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3031::6815:29fcπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.41.252Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.154.70πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSpoppy.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2621πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpoppy.ns.cloudflare.com
A2803:f800:50::6ca2:c221πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRpoppy.ns.cloudflare.com
A2a06:98c1:50::ac40:2221πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRpoppy.ns.cloudflare.com
A108.162.194.33πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpoppy.ns.cloudflare.com
A162.159.38.33Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpoppy.ns.cloudflare.com
A172.64.34.33πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpoppy.ns.cloudflare.com
NState.ns.cloudflare.com
A2606:4700:58::a29f:2cbfπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A2803:f800:50::6ca2:c3bfπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtate.ns.cloudflare.com
A2a06:98c1:50::ac40:23bfπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRtate.ns.cloudflare.com
A108.162.195.191πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A162.159.44.191Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
A172.64.35.191πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtate.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.41.252, 172.67.154.70
IPv6 hints2606:4700:3030::ac43:9a46, 2606:4700:3031::6815:29fc
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=235, name=cloudflare-ech.com
SOApoppy.ns.cloudflare.comdns@cloudflare.com serial=2409690821

org

DNSSECπŸ”’ Signed (DS record present)
NSa0.org.afilias-nst.info ⭐ ⚠️ Not in parent delegation
NSa2.org.afilias-nst.info ⚠️ Not in parent delegation
NSb0.org.afilias-nst.org
NSb2.org.afilias-nst.org
NSc0.org.afilias-nst.info ⚠️ Not in parent delegation
NSd0.org.afilias-nst.org
SOAa0.org.afilias-nst.infohostmaster@donuts.email serial=1785466445

Previously MX for

Same first word

DNS History

17 records (6 active, 11 former)

2017201820192020202120222023202420252026NSpoppy.ns.cloudflare.comtate.ns.cloudflare.com5014.ns1.abovedomains.com5014.ns2.abovedomains.comns1.abovedomains.comns1.speedydns.netns2.abovedomains.comns2.speedydns.netns3.speedydns.netMXncforensics.orgpark-mx.above.comA104.21.41.252172.67.154.702606:4700:3030::ac43:9a462606:4700:3031::6815:29fc103.224.212.206149.47.147.243
β—‹NS5014.ns1.abovedomains.com2026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NS5014.ns2.abovedomains.com2026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NSns1.abovedomains.com2026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NSns1.speedydns.net2016-09-26 β†’ 2017-09-23 Β· 4 obs
● 2016-09-26 16:56:00
● 2017-09-23 17:38:52
β—‹ 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NSns2.abovedomains.com2026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NSns2.speedydns.net2016-09-26 β†’ 2017-09-23 Β· 4 obs
● 2016-09-26 16:56:00
● 2017-09-23 17:38:52
β—‹ 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹NSns3.speedydns.net2016-09-26 β†’ 2017-09-23 Β· 4 obs
● 2016-09-26 16:56:00
● 2017-09-23 17:38:52
β—‹ 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
●NSpoppy.ns.cloudflare.com2026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08
●NState.ns.cloudflare.com2026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08
β—‹MXncforensics.org2016-09-26 β†’ 2017-09-23 Β· 4 obs
● 2016-09-26 16:56:00
● 2017-09-23 17:38:52
β—‹ 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹MXpark-mx.above.com2026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
β—‹A103.224.212.2062026-02-22 β†’ 2026-02-22 Β· 3 obs
β—‹ 2017-09-23 17:38:52
● 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
●A104.21.41.2522026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08
β—‹A149.47.147.2432016-09-26 β†’ 2017-09-23 Β· 4 obs
● 2016-09-26 16:56:00
● 2017-09-23 17:38:52
β—‹ 2026-02-22 05:18:56
β—‹ 2026-07-31 03:32:08
●A172.67.154.702026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08
●A2606:4700:3030::ac43:9a462026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08
●A2606:4700:3031::6815:29fc2026-07-31 β†’ 2026-07-31 Β· 2 obs
β—‹ 2026-02-22 05:18:56
● 2026-07-31 03:32:08

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
orgb0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org-
ncforensics.orgtate.ns.cloudflare.com, poppy.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.38.33

NS records: tate.ns.cloudflare.com, poppy.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ncforensics.org (unsigned zone)

⏱️ Timing

Total: 428ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.41.252, 172.67.154.70
AAAA22606:4700:3031::6815:29fc, 2606:4700:3030::ac43:9a46
NS2poppy.ns.cloudflare.com, tate.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1poppy.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

ncforensics.org points to the four IP addresses 104.21.41.252, 172.67.154.70, 2606:4700:3030::ac43:9a46 and 2606:4700:3031::6815:29fc.

spinjet.online, uxamepe.top, weddingkakis.com plus two other host names have IP numbers in common with ncforensics.org.

Name Servers

ncforensics.org is served by two delegated name servers, poppy.ns.cloudflare.com and tate.ns.cloudflare.com.

The name server configuration of ncforensics.org is shared with other domains, for instance pinxpay.com, anagaming.com.br, apostei.com and two others.

There is at least partial name server overlap between ncforensics.org and other domains β€” brittkit.com, webtegre.com, freddiestavernmi.com and two more among them.

The name servers quinton.ns.cloudflare.com, stan.ns.cloudflare.com and susan.ns.cloudflare.com are often found in combination with these name servers.

Hosts with 6 IP addresses each:

poppy.ns.cloudflare.com carries IP addresses 108.162.194.33, 162.159.38.33 and 172.64.34.33, with 3 other addresses beyond those.

tate.ns.cloudflare.com carries IP addresses 108.162.195.191, 162.159.44.191 and 172.64.35.191, with 3 other addresses beyond those.