`1declinepayment.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:87ea^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:757^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.7.87^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.135.234^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`amy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a65^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c065^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`amy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2065^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`amy.ns.cloudflare.com`
		A	108.162.192.101^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	172.64.32.101^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	173.245.58.101^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
NS	`grant.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c82^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`grant.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c382^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`grant.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2382^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`grant.ns.cloudflare.com`
		A	108.162.195.130^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`grant.ns.cloudflare.com`
		A	162.159.44.130^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`grant.ns.cloudflare.com`
		A	172.64.35.130^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`grant.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.7.87, 172.67.135.234
		IPv6 hints	2606:4700:3033::ac43:87ea, 2606:4700:3036::6815:757
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=175, name=cloudflare-ech.com
SOA	`amy.ns.cloudflare.com`dns@cloudflare.com serial=2399401009

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775121332

⚠️ On DNS blocklist: tif

Same first word

1declinepayment.com

DNS History

10 records (6 active, 4 former)

●NSamy.ns.cloudflare.com2026-03-09 → 2026-04-02 · 2 obs

● 2026-03-09 22:46:34
● 2026-04-02 09:26:02

●NSgrant.ns.cloudflare.com2026-03-09 → 2026-04-02 · 2 obs

● 2026-03-09 22:46:34
● 2026-04-02 09:26:02

●A104.21.7.872026-03-09 → 2026-04-02 · 5 obs

● 2026-03-09 22:46:34
● 2026-03-11 03:30:56
○ 2026-03-17 01:14:12
● 2026-03-17 20:07:56
● 2026-04-02 09:26:02

●A172.67.135.2342026-03-09 → 2026-04-02 · 5 obs

● 2026-03-09 22:46:34
● 2026-03-11 03:30:56
○ 2026-03-17 01:14:12
● 2026-03-17 20:07:56
● 2026-04-02 09:26:02

○A188.114.96.02026-03-17 → 2026-03-17 · 5 obs

○ 2026-03-09 22:46:34
○ 2026-03-11 03:30:56
● 2026-03-17 01:14:12
○ 2026-03-17 20:07:56
○ 2026-04-02 09:26:02

○A188.114.97.02026-03-17 → 2026-03-17 · 5 obs

○ 2026-03-09 22:46:34
○ 2026-03-11 03:30:56
● 2026-03-17 01:14:12
○ 2026-03-17 20:07:56
○ 2026-04-02 09:26:02

●A2606:4700:3033::ac43:87ea2026-03-09 → 2026-04-02 · 5 obs

● 2026-03-09 22:46:34
● 2026-03-11 03:30:56
○ 2026-03-17 01:14:12
● 2026-03-17 20:07:56
● 2026-04-02 09:26:02

●A2606:4700:3036::6815:7572026-03-09 → 2026-04-02 · 5 obs

● 2026-03-09 22:46:34
● 2026-03-11 03:30:56
○ 2026-03-17 01:14:12
● 2026-03-17 20:07:56
● 2026-04-02 09:26:02

○A2a06:98c1:3120::2026-03-17 → 2026-03-17 · 5 obs

○ 2026-03-09 22:46:34
○ 2026-03-11 03:30:56
● 2026-03-17 01:14:12
○ 2026-03-17 20:07:56
○ 2026-04-02 09:26:02

○A2a06:98c1:3121::2026-03-17 → 2026-03-17 · 5 obs

○ 2026-03-09 22:46:34
○ 2026-03-11 03:30:56
● 2026-03-17 01:14:12
○ 2026-03-17 20:07:56
○ 2026-04-02 09:26:02

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	d.gtld-servers.net, j.gtld-servers.net, i.gtld-servers.net, f.gtld-servers.net...	-
1declinepayment.com	amy.ns.cloudflare.com, grant.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.101

NS records: amy.ns.cloudflare.com, grant.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 1declinepayment.com (unsigned zone)

⏱️ Timing

Total: 110ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.7.87, 172.67.135.234`
AAAA	2	`2606:4700:3036::6815:757, 2606:4700:3033::ac43:87ea`
NS	2	`amy.ns.cloudflare.com, grant.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`amy.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (amy.ns.cloudflare.com, amy.ns.cloudflare.com, amy.ns.cloudflare.com...)

Analysis

IP Addresses

1declinepayment.com points to four IP numbers: 2606:4700:3033::ac43:87ea, 2606:4700:3036::6815:757, 104.21.7.87 and 172.67.135.234.

Other host names, for instance jwillmer.de, 178464.com, jbtop.ru, mokap.cl and cospringstrails.com share IP numbers with 1declinepayment.com.

Name Servers

1declinepayment.com is delegated to two name servers: amy.ns.cloudflare.com and grant.ns.cloudflare.com.

1declinepayment.com uses the same name server setup as other domains, for instance benjaminmikiten.com, ps3.im, telegramgroup(0x736578)x69.pages.dev, vise.im and sxzhhb.com.

1declinepayment.com shares name servers with other domains at least partially, for instance musiquecanadavousaime.com, iqcbte.study, compbem.com.br, solvita.info and zinhavnpak.com.

these name servers are often used together with the name servers byron.ns.cloudflare.com.

Host names with six IP numbers: amy.ns.cloudflare.com points to 2606:4700:50::adf5:3a65, 2803:f800:50::6ca2:c065, 2a06:98c1:50::ac40:2065, 108.162.192.101, 172.64.32.101 and 173.245.58.101; grant.ns.cloudflare.com points to 2606:4700:58::a29f:2c82, 2803:f800:50::6ca2:c382, 2a06:98c1:50::ac40:2382, 108.162.195.130, 162.159.44.130 and 172.64.35.130.

1declinepayment.com - robtex.com