theattack.us - dns.ninja

theattack.us

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:8eccπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::6815:36deπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.54.222Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.142.204πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSbetty.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a4bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbetty.ns.cloudflare.com
A2803:f800:50::6ca2:c04bπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbetty.ns.cloudflare.com
A2a06:98c1:50::ac40:204bπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbetty.ns.cloudflare.com
A108.162.192.75πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbetty.ns.cloudflare.com
A172.64.32.75πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbetty.ns.cloudflare.com
A173.245.58.75πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbetty.ns.cloudflare.com
NSnitin.ns.cloudflare.com
A2606:4700:58::adf5:3bd7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A2803:f800:50::6ca2:c1d7πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnitin.ns.cloudflare.com
A2a06:98c1:50::ac40:21d7πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRnitin.ns.cloudflare.com
A108.162.193.215πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A172.64.33.215πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
A173.245.59.215πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnitin.ns.cloudflare.com
MX_dc-mx.f75841431789.theattack.us ⭐
A138.128.188.186πŸ‡ΊπŸ‡Έ DimeNOC138.128.160.0/19 HostDime.com Route Object
PTRosiris.kmdghosting.com
TXTv=spf1 +a +mx +ip4:138.128.188.186 ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.54.222, 172.67.142.204
IPv6 hints2606:4700:3032::ac43:8ecc, 2606:4700:3034::6815:36de
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=130, name=cloudflare-ech.com
SOAbetty.ns.cloudflare.comdns@cloudflare.com serial=2410150999

us

DNSSECπŸ”’ Signed (DS record present)
NSa.cctld.us ⭐
NSb.cctld.us
NSf.cctld.us
NSk.cctld.us
NSm.cctld.us
NSn.cctld.us
NSw.cctld.us
NSx.cctld.us
NSy.cctld.us
SOAa.cctld.usadmin@tldns.godaddy serial=1784939724

Previously MX for

Same first word

Similar names

DNS History

18 records (7 active, 11 former)

20162017201820192020202120222023202420252026NSbetty.ns.cloudflare.comnitin.ns.cloudflare.comns715.dizinc.comns716.dizinc.comMX_dc-mx.f75841431789.theattack.usdc-522acfc5ac83.theattack.ustheattack.usA104.21.54.222172.67.142.2042606:4700:3032::ac43:8ecc2606:4700:3034::6815:36de104.24.108.77104.24.109.772400:cb00:2048:1::6818:6c4d2400:cb00:2048:1::6818:6d4d2606:4700:3030::6815:36de2606:4700:3036::ac43:8ecc66.7.219.81
●NSbetty.ns.cloudflare.com2017-06-27 β†’ 2026-07-25 Β· 3 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
● 2026-07-25 01:29:18
●NSnitin.ns.cloudflare.com2017-06-27 β†’ 2026-07-25 Β· 3 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
● 2026-07-25 01:29:18
β—‹NSns715.dizinc.com2015-07-04 β†’ 2016-11-29 Β· 4 obs
● 2015-07-04 13:15:00
● 2016-11-29 14:04:16
β—‹ 2017-06-27 12:45:34
β—‹ 2026-07-25 01:29:18
β—‹NSns716.dizinc.com2015-07-04 β†’ 2016-11-29 Β· 4 obs
● 2015-07-04 13:15:00
● 2016-11-29 14:04:16
β—‹ 2017-06-27 12:45:34
β—‹ 2026-07-25 01:29:18
●MX_dc-mx.f75841431789.theattack.us2026-02-21 β†’ 2026-07-25 Β· 3 obs
β—‹ 2017-06-27 12:45:34
● 2026-02-21 05:52:06
● 2026-07-25 01:29:18
β—‹MXdc-522acfc5ac83.theattack.us2017-06-27 β†’ 2017-06-27 Β· 4 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
β—‹ 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
β—‹MXtheattack.us2015-07-04 β†’ 2016-11-29 Β· 4 obs
● 2015-07-04 13:15:00
● 2016-11-29 14:04:16
β—‹ 2017-06-27 12:45:34
β—‹ 2026-07-25 01:29:18
●A104.21.54.2222026-02-21 β†’ 2026-07-25 Β· 3 obs
β—‹ 2017-06-27 12:45:34
● 2026-02-21 05:52:06
● 2026-07-25 01:29:18
β—‹A104.24.108.772017-06-27 β†’ 2017-06-27 Β· 4 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
β—‹ 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
β—‹A104.24.109.772017-06-27 β†’ 2017-06-27 Β· 4 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
β—‹ 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
●A172.67.142.2042026-02-21 β†’ 2026-07-25 Β· 3 obs
β—‹ 2017-06-27 12:45:34
● 2026-02-21 05:52:06
● 2026-07-25 01:29:18
β—‹A2400:cb00:2048:1::6818:6c4d2017-06-27 β†’ 2017-06-27 Β· 4 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
β—‹ 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
β—‹A2400:cb00:2048:1::6818:6d4d2017-06-27 β†’ 2017-06-27 Β· 4 obs
β—‹ 2016-11-29 14:04:16
● 2017-06-27 12:45:34
β—‹ 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
β—‹A2606:4700:3030::6815:36de2026-02-21 β†’ 2026-02-21 Β· 3 obs
β—‹ 2017-06-27 12:45:34
● 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
●A2606:4700:3032::ac43:8ecc2026-07-25 β†’ 2026-07-25 Β· 2 obs
β—‹ 2026-02-21 05:52:06
● 2026-07-25 01:29:18
●A2606:4700:3034::6815:36de2026-07-25 β†’ 2026-07-25 Β· 2 obs
β—‹ 2026-02-21 05:52:06
● 2026-07-25 01:29:18
β—‹A2606:4700:3036::ac43:8ecc2026-02-21 β†’ 2026-02-21 Β· 3 obs
β—‹ 2017-06-27 12:45:34
● 2026-02-21 05:52:06
β—‹ 2026-07-25 01:29:18
β—‹A66.7.219.812015-07-04 β†’ 2016-11-29 Β· 4 obs
● 2015-07-04 13:15:00
● 2016-11-29 14:04:16
β—‹ 2017-06-27 12:45:34
β—‹ 2026-07-25 01:29:18

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
usn.cctld.us, w.cctld.us, k.cctld.us, m.cctld.us...-
theattack.usbetty.ns.cloudflare.com, nitin.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.193.215

NS records: betty.ns.cloudflare.com, nitin.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for theattack.us (unsigned zone)

⏱️ Timing

Total: 816ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.54.222, 172.67.142.204
AAAA22606:4700:3034::6815:36de, 2606:4700:3032::ac43:8ecc
NS2betty.ns.cloudflare.com, nitin.ns.cloudflare.com
MX1_dc-mx.f75841431789.theattack.us (pri: 0
TXT1v=spf1 +a +mx +ip4:138.128.188.186 ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1betty.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

theattack.us points to the four IP addresses 104.21.54.222, 172.67.142.204, 2606:4700:3032::ac43:8ecc and 2606:4700:3034::6815:36de.

live-koora.buzz, cilisboa.org, www.twojdobrycoach.pl plus two other host names have IP numbers in common with theattack.us.

Name Servers

DNS delegation for theattack.us points to two name servers: betty.ns.cloudflare.com and nitin.ns.cloudflare.com.

The name server configuration of theattack.us is shared with other domains, for instance kmdg.com, load.money, zenshanti.com and two others.

At least some of theattack.us's name servers are shared with other domains, for example 2016sq.com, therip.ru, iqalex.com and two more.

These name servers tend to be deployed in combination with the name servers piotr.ns.cloudflare.com and cass.ns.cloudflare.com.

Hosts with 6 IP addresses each:

betty.ns.cloudflare.com has IP addresses 108.162.192.75, 172.64.32.75 and 173.245.58.75, plus 3 other.

nitin.ns.cloudflare.com has IP addresses 108.162.193.215, 172.64.33.215 and 173.245.59.215, plus 3 other.

Mail Servers

theattack.us uses one mail server β€” _dc-mx.f75841431789.theattack.us.

_dc-mx.f75841431789.theattack.us has exactly one IP number: 138.128.188.186.