`catalyst-winbonus.click`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:4248^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3030::ac43:a811^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.66.72^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.168.17^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`aiden.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b37^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aiden.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c137^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aiden.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2137^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aiden.ns.cloudflare.com`
		A	108.162.193.55^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aiden.ns.cloudflare.com`
		A	172.64.33.55^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aiden.ns.cloudflare.com`
		A	173.245.59.55^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aiden.ns.cloudflare.com`
NS	`sierra.ns.cloudflare.com`
		A	2606:4700:50::a29f:26f5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2f5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sierra.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22f5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sierra.ns.cloudflare.com`
		A	108.162.194.245^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	162.159.38.245^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	172.64.34.245^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.66.72, 172.67.168.17
		IPv6 hints	2606:4700:3030::6815:4248, 2606:4700:3030::ac43:a811
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=5, name=cloudflare-ech.com
SOA	`aiden.ns.cloudflare.com`dns@cloudflare.com serial=2408996502

`click`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns01.trs-dns.com` ⭐
	NS	`ns.trs-dns.com`
	NS	`ns01.trs-dns.net`
	NS	`ns10.trs-dns.info`
	NS	`ns10.trs-dns.org`
	SOA	`ns.trs-dns.com`trs-ops@tucows.com serial=1786327843

⚠️ On DNS blocklist: tif
⚠️ On DNS blocklist: spam-tlds

Same first word

catalyst-winbonus.click

DNS History

10 records (6 active, 4 former)

●NSaiden.ns.cloudflare.com2026-07-26 → 2026-08-10 · 2 obs

● 2026-07-26 23:14:14
● 2026-08-10 03:08:14

●NSsierra.ns.cloudflare.com2026-07-26 → 2026-08-10 · 2 obs

● 2026-07-26 23:14:14
● 2026-08-10 03:08:14

●A104.21.66.722026-08-10 → 2026-08-10 · 2 obs

○ 2026-07-26 23:14:14
● 2026-08-10 03:08:14

●A172.67.168.172026-08-10 → 2026-08-10 · 2 obs

○ 2026-07-26 23:14:14
● 2026-08-10 03:08:14

○A188.114.96.42026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 23:14:14
○ 2026-08-10 03:08:14

○A188.114.97.42026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 23:14:14
○ 2026-08-10 03:08:14

●A2606:4700:3030::6815:42482026-08-10 → 2026-08-10 · 2 obs

○ 2026-07-26 23:14:14
● 2026-08-10 03:08:14

●A2606:4700:3030::ac43:a8112026-08-10 → 2026-08-10 · 2 obs

○ 2026-07-26 23:14:14
● 2026-08-10 03:08:14

○A2a06:98c1:3120::42026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 23:14:14
○ 2026-08-10 03:08:14

○A2a06:98c1:3121::42026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 23:14:14
○ 2026-08-10 03:08:14

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
click	ns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.org, ns10.trs-dns.info	8 records
catalyst-winbonus.click	aiden.ns.cloudflare.com, sierra.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.245

NS records: aiden.ns.cloudflare.com, sierra.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for catalyst-winbonus.click (unsigned zone)

⏱️ Timing

Total: 314ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.66.72, 172.67.168.17`
AAAA	2	`2606:4700:3030::6815:4248, 2606:4700:3030::ac43:a811`
NS	2	`aiden.ns.cloudflare.com, sierra.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aiden.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.org...)

Analysis

IP Addresses

catalyst-winbonus.click directs to four IP numbers, which are 104.21.66.72, 172.67.168.17, 2606:4700:3030::6815:4248 and 2606:4700:3030::ac43:a811.

Two other host names, along with neoprotect-142.com, firetahufiusanalyticsco.digital and botlets.net, also share IP numbers with catalyst-winbonus.click.

Name Servers

catalyst-winbonus.click uses two name servers for its delegation: aiden.ns.cloudflare.com and sierra.ns.cloudflare.com.

catalyst-winbonus.click shares its NS records with other domains, for example stellar-bonusstorm.click, astrix-goldenvault.click, vector-goldenbeam.click and two others.

There is at least partial name server overlap between catalyst-winbonus.click and other domains — pavel-aheichyk.name, 99ttkk.com, maverickassociatesgroup.com and two more among them.

These name servers are routinely deployed together with the name servers zoe.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname aiden.ns.cloudflare.com directs to 108.162.193.55, 172.64.33.55 and 173.245.59.55 along with 3 other IP addresses.

Hostname sierra.ns.cloudflare.com directs to 108.162.194.245, 162.159.38.245 and 172.64.34.245 along with 3 other IP addresses.

catalyst-winbonus.click - robtex.com