`attacker-domain.com`

DNSSEC	🔒 Signed (DS record present)
A	2001:4860:4802:32::15^{🇺🇸 Google2001:4860::/32}
		PTR	`any-in-2001-4860-4802-32--15.1e100.net`
A	2001:4860:4802:34::15^{🇺🇸 Google2001:4860::/32}
A	2001:4860:4802:36::15^{🇺🇸 Google2001:4860::/32}
A	2001:4860:4802:38::15^{🇺🇸 Google2001:4860::/32}
A	216.239.32.21^{🇺🇸 Google216.239.32.0/24}
A	216.239.34.21^{🇺🇸 Google216.239.34.0/24}
A	216.239.36.21^{🇺🇸 Google216.239.36.0/24}
A	216.239.38.21^{🇺🇸 Google216.239.38.0/24}
NS	`ns-cloud-e1.googledomains.com` ⭐
		A	2001:4860:4802:32::6e^{🇺🇸 Google2001:4860::/32}
			PTR	`ns-cloud-e1.googledomains.com`
		A	216.239.32.110^{🇺🇸 Google216.239.32.0/24}
			PTR	`ns-cloud-e1.googledomains.com`
NS	`ns-cloud-e2.googledomains.com`
		A	2001:4860:4802:34::6e^{🇺🇸 Google2001:4860::/32}
			PTR	`ns-cloud-e2.googledomains.com`
		A	216.239.34.110^{🇺🇸 Google216.239.34.0/24}
			PTR	`ns-cloud-e2.googledomains.com`
NS	`ns-cloud-e3.googledomains.com`
		A	2001:4860:4802:36::6e^{🇺🇸 Google2001:4860::/32}
			PTR	`ns-cloud-e3.googledomains.com`
		A	216.239.36.110^{🇺🇸 Google216.239.36.0/24}
			PTR	`ns-cloud-e3.googledomains.com`
NS	`ns-cloud-e4.googledomains.com`
		A	2001:4860:4802:38::6e^{🇺🇸 Google2001:4860::/32}
			PTR	`ns-cloud-e4.googledomains.com`
		A	216.239.38.110^{🇺🇸 Google216.239.38.0/24}
			PTR	`ns-cloud-e4.googledomains.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c1b::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`wv-in-f26.1e100.net`
		A	192.178.155.27^{🇺🇸 Google192.178.155.0/24}
			PTR	`yuiadrs-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2607:f8b0:4023:2801::1b^{🇺🇸 Google2607:f8b0::/32}
			PTR	`lcausi-in-f27.1e100.net`
		A	192.178.128.27^{🇺🇸 Google192.178.128.0/24}
			PTR	`lcausi-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2607:f8b0:4023:3003::1a^{🇺🇸 Google2607:f8b0::/32}
			PTR	`yulnkjt-in-f26.1e100.net`
		A	172.253.145.27^{🇺🇸 Google172.253.145.0/24}
			PTR	`yulnkjt-in-f27.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c00::1a^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`ws-in-f26.1e100.net`
			PTR	`ws-in-x1a.1e100.net`
		A	173.194.76.26^{🇺🇸 Google173.194.76.0/24}
			PTR	`ws-in-f26.1e100.net`
TXT	`v=spf1 include:_spf.google.com ~all`
SOA	`ns-cloud-e1.googledomains.com`dns-admin@google.com serial=35

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778509556

⚠️ On DNS blocklist: tif

Same first word

attacker-domain.com

DNS History

22 records (17 active, 5 former)

●NSns-cloud-e1.googledomains.com2016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●NSns-cloud-e2.googledomains.com2016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●NSns-cloud-e3.googledomains.com2016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●NSns-cloud-e4.googledomains.com2016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●MXalt1.aspmx.l.google.com2026-03-15 → 2026-05-11 · 3 obs

○ 2017-08-27 12:28:58
● 2026-03-15 04:13:12
● 2026-05-11 14:43:54

○MXalt1.gmr-smtp-in.l.google.com2016-12-16 → 2017-08-27 · 4 obs

● 2016-12-16 19:49:14
● 2017-08-27 12:28:58
○ 2026-03-15 04:13:12
○ 2026-05-11 14:43:54

●MXalt2.aspmx.l.google.com2026-03-15 → 2026-05-11 · 3 obs

○ 2017-08-27 12:28:58
● 2026-03-15 04:13:12
● 2026-05-11 14:43:54

○MXalt2.gmr-smtp-in.l.google.com2016-12-16 → 2017-08-27 · 4 obs

● 2016-12-16 19:49:14
● 2017-08-27 12:28:58
○ 2026-03-15 04:13:12
○ 2026-05-11 14:43:54

●MXalt3.aspmx.l.google.com2026-03-15 → 2026-05-11 · 3 obs

○ 2017-08-27 12:28:58
● 2026-03-15 04:13:12
● 2026-05-11 14:43:54

○MXalt3.gmr-smtp-in.l.google.com2016-12-16 → 2017-08-27 · 4 obs

● 2016-12-16 19:49:14
● 2017-08-27 12:28:58
○ 2026-03-15 04:13:12
○ 2026-05-11 14:43:54

●MXalt4.aspmx.l.google.com2026-03-15 → 2026-05-11 · 3 obs

○ 2017-08-27 12:28:58
● 2026-03-15 04:13:12
● 2026-05-11 14:43:54

○MXalt4.gmr-smtp-in.l.google.com2016-12-16 → 2017-08-27 · 4 obs

● 2016-12-16 19:49:14
● 2017-08-27 12:28:58
○ 2026-03-15 04:13:12
○ 2026-05-11 14:43:54

●MXaspmx.l.google.com2026-03-15 → 2026-05-11 · 3 obs

○ 2017-08-27 12:28:58
● 2026-03-15 04:13:12
● 2026-05-11 14:43:54

○MXgmr-smtp-in.l.google.com2016-12-16 → 2017-08-27 · 4 obs

● 2016-12-16 19:49:14
● 2017-08-27 12:28:58
○ 2026-03-15 04:13:12
○ 2026-05-11 14:43:54

●A2001:4860:4802:32::152016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A2001:4860:4802:34::152016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A2001:4860:4802:36::152016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A2001:4860:4802:38::152016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A216.239.32.212016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A216.239.34.212016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A216.239.36.212016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

●A216.239.38.212016-12-16 → 2026-05-11 · 2 obs

● 2016-12-16 19:49:14
● 2026-05-11 14:43:54

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, d.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net...	-
attacker-domain.com	ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com	8 records

✅ Authoritative Response

Server:216.239.34.110

NS records: ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 723ms | Queries: -

📄 Records

Type	Count	Sample Data
A	4	`216.239.34.21, 216.239.36.21...`
AAAA	4	`2001:4860:4802:38::15, 2001:4860:4802:32::15...`
NS	4	`ns-cloud-e1.googledomains.com, ns-cloud-e3.googledomains.com...`
MX	5	`alt1.aspmx.l.google.com (pri: 5), alt3.aspmx.l.google.com (pri: 10)...`
TXT	1	`v=spf1 include:_spf.google.com ~all`
SOA	1	`ns-cloud-e1.googledomains.com dns-admin.`

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns-cloud-e1.googledomains.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com...)

Analysis

IP Addresses

Eight IP numbers are targeted by attacker-domain.com: 2001:4860:4802:32::15, 2001:4860:4802:34::15, 2001:4860:4802:36::15, 2001:4860:4802:38::15, 216.239.32.21, 216.239.34.21, 216.239.36.21 and 216.239.38.21.

other host names including speedserv.ro, xpelpharma.com, swaab.me, pentanodal.com and meitec-i.com share IP numbers with attacker-domain.com.

Name Servers

attacker-domain.com is delegated to four name servers: ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com and ns-cloud-e4.googledomains.com.

attacker-domain.com at least partially shares name servers with other domains, for instance celiactual.com, cookingtheplanet.com, hencorepro.com, beautymatrix.store and shathar.com.

Host names with two IP numbers:

ns-cloud-e1.googledomains.com points to 2001:4860:4802:32::6e and 216.239.32.110; ns-cloud-e2.googledomains.com points to 2001:4860:4802:34::6e and 216.239.34.110; ns-cloud-e3.googledomains.com points to 2001:4860:4802:36::6e and 216.239.36.110; ns-cloud-e4.googledomains.com points to 2001:4860:4802:38::6e and 216.239.38.110.

Mail Servers

attacker-domain.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

attacker-domain.com shares some mail servers with other domains, at least partially, for instance hoofboot.com, penn.systems, desaimmobilier.com, moringen.no and thekyhomeinspector.org.