httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win - dns.ninja

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:8f65🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::6815:2efc🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.46.252Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.143.101🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSduke.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b6e🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRduke.ns.cloudflare.com
A2803:f800:50::6ca2:c16e🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRduke.ns.cloudflare.com
A2a06:98c1:50::ac40:216e🇺🇸 Cloudflare2a06:98c1:50::/45
PTRduke.ns.cloudflare.com
A108.162.193.110🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRduke.ns.cloudflare.com
A172.64.33.110🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRduke.ns.cloudflare.com
A173.245.59.110🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRduke.ns.cloudflare.com
NSximena.ns.cloudflare.com
A2606:4700:50::a29f:260a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRximena.ns.cloudflare.com
A2803:f800:50::6ca2:c20a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRximena.ns.cloudflare.com
A2a06:98c1:50::ac40:220a🇺🇸 Cloudflare2a06:98c1:50::/45
PTRximena.ns.cloudflare.com
A108.162.194.10🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRximena.ns.cloudflare.com
A162.159.38.10Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRximena.ns.cloudflare.com
A172.64.34.10🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRximena.ns.cloudflare.com
MXmx01.mail.icloud.com ⭐
A17.42.251.62🇺🇸 Apple17.42.0.0/16
A17.56.9.31🇺🇸 Apple17.56.9.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.152.5🇺🇸 Apple17.57.152.0/23
A17.57.154.33🇺🇸 Apple17.57.154.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.155.25🇺🇸 Apple17.57.155.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.156.30🇺🇸 Apple17.57.156.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
MXmx02.mail.icloud.com ⭐
A17.42.251.62🇺🇸 Apple17.42.0.0/16
A17.56.9.31🇺🇸 Apple17.56.9.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.152.5🇺🇸 Apple17.57.152.0/23
A17.57.154.33🇺🇸 Apple17.57.154.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.155.25🇺🇸 Apple17.57.155.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
A17.57.156.30🇺🇸 Apple17.57.156.0/24
PTRmx01.mail.icloud.com
PTRmx02.mail.icloud.com
TXTapple-domain=2j80eyhbu8VKbDq9
TXTv=spf1 include:icloud.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.46.252, 172.67.143.101
IPv6 hints2606:4700:3030::ac43:8f65, 2606:4700:3035::6815:2efc
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=0, name=cloudflare-ech.com
SOAduke.ns.cloudflare.comdns@cloudflare.com serial=2410464101

win

DNSSEC🔒 Signed (DS record present)
NSns1.dns.nic.win ⭐
NSa.nic.win
NSb.nic.win
NSc.nic.win
NSns2.dns.nic.win
NSns3.dns.nic.win
SOAns1.dns.nic.winadmin@tldns.godaddy serial=1786288464
⚠️ On DNS blocklist: spam-tlds

Same first word

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win

DNS History

10 records (8 active, 2 former)

NSduke.ns.cloudflare.comximena.ns.cloudflare.comMXmx01.mail.icloud.commx02.mail.icloud.comA104.21.46.252172.67.143.1012606:4700:3030::ac43:8f652606:4700:3035::6815:2efc2606:4700:3031::6815:2efc2606:4700:3037::ac43:8f65
●NSduke.ns.cloudflare.com2026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●NSximena.ns.cloudflare.com2026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●MXmx01.mail.icloud.com2026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●MXmx02.mail.icloud.com2026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●A104.21.46.2522026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●A172.67.143.1012026-03-11 → 2026-08-09 · 2 obs
● 2026-03-11 23:20:38
● 2026-08-09 16:08:38
●A2606:4700:3030::ac43:8f652026-06-21 → 2026-08-09 · 3 obs
○ 2026-06-17 12:22:34
● 2026-06-21 11:44:34
● 2026-08-09 16:08:38
○A2606:4700:3031::6815:2efc2026-03-11 → 2026-06-17 · 4 obs
● 2026-03-11 23:20:38
● 2026-06-17 12:22:34
○ 2026-06-21 11:44:34
○ 2026-08-09 16:08:38
●A2606:4700:3035::6815:2efc2026-06-21 → 2026-08-09 · 3 obs
○ 2026-06-17 12:22:34
● 2026-06-21 11:44:34
● 2026-08-09 16:08:38
○A2606:4700:3037::ac43:8f652026-03-11 → 2026-06-17 · 4 obs
● 2026-03-11 23:20:38
● 2026-06-17 12:22:34
○ 2026-06-21 11:44:34
○ 2026-08-09 16:08:38

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
wina.nic.win, ns2.dns.nic.win, c.nic.win, ns3.dns.nic.win...12 records
httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.winduke.ns.cloudflare.com, ximena.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.110

NS records: duke.ns.cloudflare.com, ximena.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win (unsigned zone)

⏱️ Timing

Total: 646ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.46.252, 172.67.143.101
AAAA22606:4700:3035::6815:2efc, 2606:4700:3030::ac43:8f65
NS2duke.ns.cloudflare.com, ximena.ns.cloudflare.com
MX2mx01.mail.icloud.com (pri: 10), mx02.mail.icloud.com (pri: 10)
TXT2apple-domain=2j80eyhbu8VKbDq9, v=spf1 include:icloud.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1duke.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, a.nic.win, ns2.dns.nic.win...)

Analysis

IP Addresses

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win resolves to four IP addresses: 104.21.46.252, 172.67.143.101, 2606:4700:3030::ac43:8f65 and 2606:4700:3035::6815:2efc.

Two other host names, along with melbetcasino.games, rikbet.mx and www.d66tiel.nl, also share IP numbers with httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win.

Name Servers

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win uses two name servers for its delegation: duke.ns.cloudflare.com and ximena.ns.cloudflare.com.

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win shares its NS records with other domains, for example cyclo-vets.org, online-casino-australia200.shop, sky-coolcasino.life and two others.

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win shares at least some of its name servers with other domains, including wickedfivespoon.com, webexstudios.com, outsourced365.com and two others.

These name servers are frequently paired with the name servers elmo.ns.cloudflare.com and fay.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname duke.ns.cloudflare.com directs to 108.162.193.110, 172.64.33.110 and 173.245.59.110 along with 3 other IP addresses.

Hostname ximena.ns.cloudflare.com directs to 108.162.194.10, 162.159.38.10 and 172.64.34.10 along with 3 other IP addresses.

Mail Servers

httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win is served by two mail servers, mx01.mail.icloud.com and mx02.mail.icloud.com.

Among the domains sharing a mail server setup with httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win are agoran.fr, elessarthiessen.com, ehrke.email and two others.

At least some of httpswwwcloudflarecomlearningddoswhat-is-a-ddos-attack.win's mail servers are shared with other domains, among them christinenorrie.com, johnnyamartinez.com and rojeka.com.

DNS names with 6 IP addresses:

Hostname mx01.mail.icloud.com directs to 17.42.251.62, 17.56.9.31 and 17.57.152.5 along with 3 other IP addresses.

Hostname mx02.mail.icloud.com directs to 17.42.251.62, 17.56.9.31 and 17.57.152.5 along with 3 other IP addresses.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.42.251.62 IP addresses each.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.56.9.31 IP addresses each.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.57.152.5 IP addresses each.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.57.154.33 IP addresses each.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.57.155.25 IP addresses each.

Both mx01.mail.icloud.com and mx02.mail.icloud.com resolve to 17.57.156.30 IP addresses each.