attacker.website - dns.ninja

`attacker.website`

DNSSEC	⚠️ Not signed
A	162.255.119.7^{🇺🇸 NAMCHEAP-PH162.255.119.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
NS	`dns1.registrar-servers.com` ⭐
		A	2610:a1:1024::200^{🇺🇸 MAINT-ID-120082610:a1:1024::/48 Neustar}
			PTR	`dns1.namecheaphosting.com`
			PTR	`dns1.registrar-servers.com`
		A	156.154.132.200^{🇺🇸 MAINT-ID-12008156.154.132.0/24 Neustar}
			PTR	`dns1.namecheaphosting.com`
			PTR	`dns1.registrar-servers.com`
NS	`dns2.registrar-servers.com`
		A	2610:a1:1025::200^{🇺🇸 MAINT-ID-120082610:a1:1025::/48 Neustar}
			PTR	`dns2.namecheaphosting.com`
			PTR	`dns2.registrar-servers.com`
		A	156.154.133.200^{🇺🇸 MAINT-ID-12008156.154.133.0/24 Neustar}
			PTR	`dns2.namecheaphosting.com`
			PTR	`dns2.registrar-servers.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
SOA	`dns1.registrar-servers.com`hostmaster@registrar-servers.com serial=1736313112

`website`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns01.trs-dns.com` ⭐
	NS	`ns.trs-dns.com`
	NS	`ns01.trs-dns.net`
	NS	`ns10.trs-dns.info`
	NS	`ns10.trs-dns.org`
	SOA	`ns.trs-dns.com`trs-ops@tucows.com serial=1786039719

⚠️ On DNS blocklist: spam-tlds

Same first word

attacker.host

attacker.cc

attacker.ru

attacker.net

attacker.ws

attacker.me

attacker.site

attacker.org

attacker.fit

attacker.tv

attacker.co

attacker.us

attacker.com

attacker.website

attacker.so

attacker.network

attacker.bz

attacker.de

Similar names

DNS History

15 records (8 active, 7 former)

●NSdns1.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

●NSdns2.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

○NStdns1.alf.nu2016-12-13 → 2017-08-08 · 4 obs

● 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

○NStdns2.alf.nu2016-12-13 → 2017-08-08 · 4 obs

● 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

○MXalt1.aspmx.l.google.com2016-12-13 → 2017-08-08 · 4 obs

● 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

○MXalt2.aspmx.l.google.com2016-12-13 → 2017-08-08 · 4 obs

● 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

○MXaspmx.l.google.com2016-12-13 → 2017-08-08 · 4 obs

● 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

●MXeforward1.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

●MXeforward2.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

●MXeforward3.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

●MXeforward4.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

●MXeforward5.registrar-servers.com2026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

○A139.59.196.302017-08-08 → 2017-08-08 · 4 obs

○ 2016-12-13 00:32:06
● 2017-08-08 09:32:28
○ 2026-04-28 16:01:38
○ 2026-08-06 18:32:34

●A162.255.119.72026-04-28 → 2026-08-06 · 3 obs

○ 2017-08-08 09:32:28
● 2026-04-28 16:01:38
● 2026-08-06 18:32:34

○A178.62.85.1262016-12-13 → 2016-12-13 · 3 obs

● 2016-12-13 00:32:06
○ 2017-08-08 09:32:28
○ 2026-08-06 18:32:34

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
website	ns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.org, ns10.trs-dns.info	8 records
attacker.website	dns1.registrar-servers.com, dns2.registrar-servers.com	-

✅ Authoritative Response

Server:156.154.132.200

NS records: dns1.registrar-servers.com, dns2.registrar-servers.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attacker.website (unsigned zone)

⏱️ Timing

Total: 763ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`162.255.119.7`
NS	2	`dns1.registrar-servers.com, dns2.registrar-servers.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
SOA	1	`dns1.registrar-servers.com hostmaster.re`

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.com, ns01.trs-dns.com, ns01.trs-dns.net...)

Analysis

IP Addresses

attacker.website points to a single IP number: 162.255.119.7.

Additional host names — egrubhub.com, southwestabatement.com, jblmmwr.com and two others — share IP numbers with attacker.website.

Name Servers

The NS records for attacker.website delegate to dns1.registrar-servers.com and dns2.registrar-servers.com.

attacker.website shares its name server setup with other domains, including micromint.finance, zizimmobilier.com, caskcovert.com and two others.

attacker.website has name servers in common with a number of other domains — pafk.org, appvara.com, matthaedo.com and preetkumar.com among them.

The name servers dns3.registrar-servers.com, dns4.registrar-servers.com and dns5.registrar-servers.com are often found in combination with these name servers.

dns1.registrar-servers.com resolves to 156.154.132.200 and 2610:a1:1024::200. Likewise, dns2.registrar-servers.com resolves to 156.154.133.200 and 2610:a1:1025::200 — two IP addresses apiece.

Mail Servers

attacker.website has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

attacker.website shares mail servers — at least in part — with other domains, including meltec.io, curios.co, cameronwenger.com and two others.

These mail servers are frequently paired with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names pointing to a single IP address:

eforward1.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward2.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward3.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward4.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward5.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com are host names that all point to 162.255.118.51.

eforward2.registrar-servers.com and eforward4.registrar-servers.com each have 162.255.118.52 IP addresses.