`attackagain.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3037::6815:4530^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:cc59^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.69.48^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.204.89^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cash.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b51^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cash.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c151^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cash.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2151^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cash.ns.cloudflare.com`
		A	108.162.193.81^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cash.ns.cloudflare.com`
		A	172.64.33.81^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cash.ns.cloudflare.com`
		A	173.245.59.81^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cash.ns.cloudflare.com`
NS	`karina.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ab2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`karina.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0b2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`karina.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20b2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`karina.ns.cloudflare.com`
		A	108.162.192.178^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`karina.ns.cloudflare.com`
		A	172.64.32.178^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`karina.ns.cloudflare.com`
		A	173.245.58.178^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`karina.ns.cloudflare.com`
MX	`mx2.zoho.com` ⭐
		A	204.141.33.44^{🇺🇸 ZohoAS204.141.32.0/23 PNAP-DAL CASE00103239}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx3.zoho.com`⁽²⁰⁾
		A	136.143.191.44^{🇺🇸 ZohoAS136.143.190.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx.zoho.com`⁽⁵⁰⁾
		A	136.143.191.44^{🇺🇸 ZohoAS136.143.190.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
		A	204.141.33.44^{🇺🇸 ZohoAS204.141.32.0/23 PNAP-DAL CASE00103239}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
TXT	`v=spf1 include:zoho.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.69.48, 172.67.204.89
		IPv6 hints	2606:4700:3037::6815:4530, 2606:4700:3037::ac43:cc59
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=11, name=cloudflare-ech.com
SOA	`cash.ns.cloudflare.com`dns@cloudflare.com serial=2403756259

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778590481

Same first word

attackagain.com

DNS History

14 records (9 active, 5 former)

●NScash.ns.cloudflare.com2026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

○NSdns1.registrar-servers.com2018-08-16 → 2018-08-16 · 3 obs

● 2018-08-16 05:52:22
○ 2026-02-15 03:24:10
○ 2026-05-12 13:18:18

○NSdns2.registrar-servers.com2018-08-16 → 2018-08-16 · 3 obs

● 2018-08-16 05:52:22
○ 2026-02-15 03:24:10
○ 2026-05-12 13:18:18

●NSkarina.ns.cloudflare.com2026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

●MXmx.zoho.com2026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

○MXmx1.privateemail.com2018-08-16 → 2018-08-16 · 3 obs

● 2018-08-16 05:52:22
○ 2026-02-15 03:24:10
○ 2026-05-12 13:18:18

○MXmx2.privateemail.com2018-08-16 → 2018-08-16 · 3 obs

● 2018-08-16 05:52:22
○ 2026-02-15 03:24:10
○ 2026-05-12 13:18:18

●MXmx2.zoho.com2026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

●MXmx3.zoho.com2026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

●A104.21.69.482026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

●A172.67.204.892026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

○A192.64.119.32018-08-16 → 2018-08-16 · 3 obs

● 2018-08-16 05:52:22
○ 2026-02-15 03:24:10
○ 2026-05-12 13:18:18

●A2606:4700:3037::6815:45302026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

●A2606:4700:3037::ac43:cc592026-02-15 → 2026-05-12 · 3 obs

○ 2018-08-16 05:52:22
● 2026-02-15 03:24:10
● 2026-05-12 13:18:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	k.gtld-servers.net, m.gtld-servers.net, b.gtld-servers.net, g.gtld-servers.net...	-
attackagain.com	cash.ns.cloudflare.com, karina.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.178

NS records: cash.ns.cloudflare.com, karina.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attackagain.com (unsigned zone)

⏱️ Timing

Total: 249ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.204.89, 104.21.69.48`
AAAA	2	`2606:4700:3037::ac43:cc59, 2606:4700:3037::6815:4530`
NS	2	`cash.ns.cloudflare.com, karina.ns.cloudflare.com`
MX	3	`mx.zoho.com (pri: 10), mx2.zoho.com (pri: 20)...`
TXT	1	`v=spf1 include:zoho.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cash.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (cash.ns.cloudflare.com, cash.ns.cloudflare.com, cash.ns.cloudflare.com...)

Analysis

IP Addresses

Four IP numbers are pointed to by attackagain.com: 2606:4700:3037::6815:4530, 2606:4700:3037::ac43:cc59, 104.21.69.48 and 172.67.204.89.

other host names including klenotyaurum.cz, mcmanu(0x736578)cavating.com, comsil.com.br, www.mp4moviez.pink and joggink.com share IP numbers with attackagain.com.

Name Servers

attackagain.com is delegated to two name servers cash.ns.cloudflare.com and karina.ns.cloudflare.com.

attackagain.com shares the same name server setup as other domains, for instance cutechix.com, random.to, auditionsadda.com, newslord.com and adventurebirding.lk.

attackagain.com at least partially shares name servers with other domains, for instance clouddataservice.co.uk, skwjj.com, culmor.com, y3866.com and satellitecity.nl.