`theftdomlayer.click`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:ce75^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:4d5f^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.77.95^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.206.117^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`henry.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bb0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1b0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`henry.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21b0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`henry.ns.cloudflare.com`
		A	108.162.193.176^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	172.64.33.176^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	173.245.59.176^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
NS	`zainab.ns.cloudflare.com`
		A	2606:4700:50::a29f:2695^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zainab.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c295^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`zainab.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2295^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`zainab.ns.cloudflare.com`
		A	108.162.194.149^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zainab.ns.cloudflare.com`
		A	162.159.38.149^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zainab.ns.cloudflare.com`
		A	172.64.34.149^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zainab.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.77.95, 172.67.206.117
		IPv6	2606:4700:3031::ac43:ce75, 2606:4700:3033::6815:4d5f
SOA	`henry.ns.cloudflare.com`dns@cloudflare.com serial=2398536878

`click`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns01.trs-dns.com` ⭐
	NS	`ns.trs-dns.com`
	NS	`ns01.trs-dns.net`
	NS	`ns10.trs-dns.info`
	NS	`ns10.trs-dns.org`
	SOA	`ns.trs-dns.com`trs-ops@tucows.com serial=1774700315

⚠️ On DNS blocklist: tif

Same first word

theftdomlayer.click

DNS History

6 records (6 active, 0 former)

●NShenry.ns.cloudflare.com2026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

●NSzainab.ns.cloudflare.com2026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

●A104.21.77.952026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

●A172.67.206.1172026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

●A2606:4700:3031::ac43:ce752026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

●A2606:4700:3033::6815:4d5f2026-03-21 → 2026-03-28 · 2 obs

● 2026-03-21 10:51:46
● 2026-03-28 12:48:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
click	ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.com, ns01.trs-dns.net	-
theftdomlayer.click	henry.ns.cloudflare.com, zainab.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.38.149

NS records: henry.ns.cloudflare.com, zainab.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for theftdomlayer.click (unsigned zone)

⏱️ Timing

Total: 636ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.77.95, 172.67.206.117`
AAAA	2	`2606:4700:3031::ac43:ce75, 2606:4700:3033::6815:4d5f`
NS	2	`henry.ns.cloudflare.com, zainab.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`henry.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

theftdomlayer.click maps to four IP numbers: 2606:4700:3031::ac43:ce75, 2606:4700:3033::6815:4d5f, 104.21.77.95 and 172.67.206.117.

Other host names, for instance allegrolokalnie.ogloszenie-23g22eg46fppmsty66qxy5.com, gsaudits.com, gas-truck.ru, signarama.com.es and knjkc.com share IP numbers with theftdomlayer.click.

Name Servers

Two name servers henry.ns.cloudflare.com and zainab.ns.cloudflare.com handle delegation for theftdomlayer.click.

theftdomlayer.click uses the same name server setup as other domains, for example anchorcorepartnersco.digital, fomotugorsystems.click, dejulisetummanagement.click, crimmerbase.click and synalgiagrid.click.

theftdomlayer.click partially shares name servers with other domains; examples include szpital4.gliwice.pl, harbinst.com, 17661q.com, sektorkami.com and 17661j.com.

These name servers are often used with the name servers jade.ns.cloudflare.com and candy.ns.cloudflare.com.

Host names with six IP numbers: henry.ns.cloudflare.com points to: 2606:4700:58::adf5:3bb0, 2803:f800:50::6ca2:c1b0, 2a06:98c1:50::ac40:21b0, 108.162.193.176, 172.64.33.176 and 173.245.59.176; zainab.ns.cloudflare.com points to: 2606:4700:50::a29f:2695, 2803:f800:50::6ca2:c295, 2a06:98c1:50::ac40:2295, 108.162.194.149, 162.159.38.149 and 172.64.34.149.

theftdomlayer.click - robtex.com