attacker.cc - robtex.com

attacker.cc

DNSSEC⚠️ Not signed
A2606:4700:3033::6815:4ba3πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::ac43:b2bdπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.75.163Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.178.189πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSgreg.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b73πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
A2803:f800:50::6ca2:c173πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgreg.ns.cloudflare.com
A2a06:98c1:50::ac40:2173πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRgreg.ns.cloudflare.com
A108.162.193.115πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
A172.64.33.115πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A173.245.59.115πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
NSjamie.ns.cloudflare.com
A2606:4700:50::adf5:3aa8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjamie.ns.cloudflare.com
A2803:f800:50::6ca2:c0a8πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjamie.ns.cloudflare.com
A2a06:98c1:50::ac40:20a8πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjamie.ns.cloudflare.com
A108.162.192.168πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjamie.ns.cloudflare.com
A172.64.32.168πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjamie.ns.cloudflare.com
A173.245.58.168πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjamie.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.75.163, 172.67.178.189
IPv6 hints2606:4700:3033::6815:4ba3, 2606:4700:3035::ac43:b2bd
SOAgreg.ns.cloudflare.comdns@cloudflare.com serial=2409120746

cc

DNSSECπŸ”’ Signed (DS record present)
NSac1.nstld.com ⭐
NSac2.nstld.com
NSac3.nstld.com
NSac4.nstld.com
SOAac1.nstld.cominfo@verisign-grs.com serial=1784589130

Subdomains

Same first word

Similar names

DNS History

12 records (6 active, 6 former)

2020202120222023202420252026NSgreg.ns.cloudflare.comjamie.ns.cloudflare.comA104.21.75.163172.67.178.1892606:4700:3033::6815:4ba32606:4700:3035::ac43:b2bd104.27.150.179104.27.151.1792606:4700:30::681b:96b32606:4700:30::681b:97b32606:4700:3031::6815:4ba32606:4700:3036::ac43:b2bd
●NSgreg.ns.cloudflare.com2019-04-20 β†’ 2026-07-20 Β· 2 obs
● 2019-04-20 14:15:56
● 2026-07-20 23:13:00
●NSjamie.ns.cloudflare.com2019-04-20 β†’ 2026-07-20 Β· 2 obs
● 2019-04-20 14:15:56
● 2026-07-20 23:13:00
●A104.21.75.1632026-03-05 β†’ 2026-07-20 Β· 3 obs
β—‹ 2019-04-20 14:15:56
● 2026-03-05 17:32:56
● 2026-07-20 23:13:00
β—‹A104.27.150.1792019-04-20 β†’ 2019-04-20 Β· 3 obs
● 2019-04-20 14:15:56
β—‹ 2026-03-05 17:32:56
β—‹ 2026-07-20 23:13:00
β—‹A104.27.151.1792019-04-20 β†’ 2019-04-20 Β· 3 obs
● 2019-04-20 14:15:56
β—‹ 2026-03-05 17:32:56
β—‹ 2026-07-20 23:13:00
●A172.67.178.1892026-03-05 β†’ 2026-07-20 Β· 3 obs
β—‹ 2019-04-20 14:15:56
● 2026-03-05 17:32:56
● 2026-07-20 23:13:00
β—‹A2606:4700:30::681b:96b32019-04-20 β†’ 2019-04-20 Β· 3 obs
● 2019-04-20 14:15:56
β—‹ 2026-03-05 17:32:56
β—‹ 2026-07-20 23:13:00
β—‹A2606:4700:30::681b:97b32019-04-20 β†’ 2019-04-20 Β· 3 obs
● 2019-04-20 14:15:56
β—‹ 2026-03-05 17:32:56
β—‹ 2026-07-20 23:13:00
β—‹A2606:4700:3031::6815:4ba32026-03-05 β†’ 2026-03-05 Β· 4 obs
β—‹ 2019-04-20 14:15:56
● 2026-03-05 17:32:56
β—‹ 2026-07-09 06:53:02
β—‹ 2026-07-20 23:13:00
●A2606:4700:3033::6815:4ba32026-07-09 β†’ 2026-07-20 Β· 3 obs
β—‹ 2026-03-05 17:32:56
● 2026-07-09 06:53:02
● 2026-07-20 23:13:00
●A2606:4700:3035::ac43:b2bd2026-07-09 β†’ 2026-07-20 Β· 3 obs
β—‹ 2026-03-05 17:32:56
● 2026-07-09 06:53:02
● 2026-07-20 23:13:00
β—‹A2606:4700:3036::ac43:b2bd2026-03-05 β†’ 2026-03-05 Β· 4 obs
β—‹ 2019-04-20 14:15:56
● 2026-03-05 17:32:56
β—‹ 2026-07-09 06:53:02
β—‹ 2026-07-20 23:13:00

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ccac1.nstld.com, ac4.nstld.com, ac3.nstld.com, ac2.nstld.com-
attacker.ccgreg.ns.cloudflare.com, jamie.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.193.115

NS records: greg.ns.cloudflare.com, jamie.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attacker.cc (unsigned zone)

⏱️ Timing

Total: 477ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.178.189, 104.21.75.163
AAAA22606:4700:3033::6815:4ba3, 2606:4700:3035::ac43:b2bd
NS2greg.ns.cloudflare.com, jamie.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1greg.ns.cloudflare.com dns.cloudflare.co

Analysis

Hierarchy

attacker.cc is the parent zone for www.attacker.cc.

IP Addresses

attacker.cc has four IP addresses: 104.21.75.163, 172.67.178.189, 2606:4700:3033::6815:4ba3 and 2606:4700:3035::ac43:b2bd.

Two other host names, along with maxmak.cn, x1h7.ygasn.com and idris.org.uk, also share IP numbers with attacker.cc.

Name Servers

attacker.cc uses two name servers for its delegation: greg.ns.cloudflare.com and jamie.ns.cloudflare.com.

attacker.cc shares its NS records with other domains, for example tenkinc.com, dtqa.net, velygon.com and two others.

attacker.cc partially shares its NS delegation with several other domains, including nuphoto.com.tw, shopext.com, diarioerc.com and two others.

The name servers cris.ns.cloudflare.com, arnold.ns.cloudflare.com, dana.ns.cloudflare.com and two others are commonly seen in use alongside these name servers.

DNS names with 6 IP addresses:

Hostname greg.ns.cloudflare.com directs to 108.162.193.115, 172.64.33.115 and 173.245.59.115 along with 3 other IP addresses.

Hostname jamie.ns.cloudflare.com directs to 108.162.192.168, 172.64.32.168 and 173.245.58.168 along with 3 other IP addresses.