`cdacovid.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:4bfd^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:b88e^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.75.253^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.142^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`betty.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`betty.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`betty.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`betty.ns.cloudflare.com`
		A	108.162.192.75^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`betty.ns.cloudflare.com`
		A	172.64.32.75^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`betty.ns.cloudflare.com`
		A	173.245.58.75^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`betty.ns.cloudflare.com`
NS	`cartman.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cdb^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cartman.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3db^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cartman.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23db^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cartman.ns.cloudflare.com`
		A	108.162.195.219^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cartman.ns.cloudflare.com`
		A	162.159.44.219^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cartman.ns.cloudflare.com`
		A	172.64.35.219^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cartman.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.75.253, 172.67.184.142
		IPv6 hints	2606:4700:3030::6815:4bfd, 2606:4700:3037::ac43:b88e
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=11, name=cloudflare-ech.com
SOA	`betty.ns.cloudflare.com`dns@cloudflare.com serial=2399626311

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778592316

⚠️ On DNS blocklist: tif

Same first word

cdacovid.com

DNS History

14 records (11 active, 3 former)

●NSbetty.ns.cloudflare.com2026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●NScartman.ns.cloudflare.com2026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

○NSns45.domaincontrol.com2020-03-27 → 2020-03-27 · 3 obs

● 2020-03-27 02:11:48
○ 2026-05-08 19:17:04
○ 2026-05-12 13:51:56

○NSns46.domaincontrol.com2020-03-27 → 2020-03-27 · 3 obs

● 2020-03-27 02:11:48
○ 2026-05-08 19:17:04
○ 2026-05-12 13:51:56

●MXeforward1.registrar-servers.com2026-05-08 → 2026-05-12 · 2 obs

● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●MXeforward2.registrar-servers.com2026-05-08 → 2026-05-12 · 2 obs

● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●MXeforward3.registrar-servers.com2026-05-08 → 2026-05-12 · 2 obs

● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●MXeforward4.registrar-servers.com2026-05-08 → 2026-05-12 · 2 obs

● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●MXeforward5.registrar-servers.com2026-05-08 → 2026-05-12 · 2 obs

● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●A104.21.75.2532026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●A172.67.184.1422026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●A2606:4700:3030::6815:4bfd2026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

●A2606:4700:3037::ac43:b88e2026-05-08 → 2026-05-12 · 3 obs

○ 2020-03-27 02:11:48
● 2026-05-08 19:17:04
● 2026-05-12 13:51:56

○A50.63.202.422020-03-27 → 2020-03-27 · 3 obs

● 2020-03-27 02:11:48
○ 2026-05-08 19:17:04
○ 2026-05-12 13:51:56

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	b.gtld-servers.net, h.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
cdacovid.com	betty.ns.cloudflare.com, cartman.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.75

NS records: betty.ns.cloudflare.com, cartman.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cdacovid.com (unsigned zone)

⏱️ Timing

Total: 548ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.75.253, 172.67.184.142`
AAAA	2	`2606:4700:3037::ac43:b88e, 2606:4700:3030::6815:4bfd`
NS	2	`betty.ns.cloudflare.com, cartman.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`betty.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (betty.ns.cloudflare.com, betty.ns.cloudflare.com, betty.ns.cloudflare.com...)

Analysis

IP Addresses

cdacovid.com maps to four IP numbers: 2606:4700:3030::6815:4bfd, 2606:4700:3037::ac43:b88e, 104.21.75.253 and 172.67.184.142.

Other host names such as mx.poutinewall.com, luminar.com.au, truelovepoint.top, adventours.ru and casino-vavada-sites535.win share IPs with cdacovid.com.

Name Servers

Two name servers betty.ns.cloudflare.com and cartman.ns.cloudflare.com handle the delegation for cdacovid.com.

cdacovid.com shares the same name server setup as other domains, for example starklad.com, dctilencal.com, innovative-gifts.com, westernkentuckyhomeinspections.com and shoreline-ps.com.

cdacovid.com at least partially shares name servers with other domains, for example outplaychess.com, vccsec.com, iptvturk.nl, sitstaging.com and littlebirdstyle.com.

These name servers are often used together with piotr.ns.cloudflare.com and yichun.ns.cloudflare.com.

Host names with six IP numbers:

betty.ns.cloudflare.com points to 2606:4700:50::adf5:3a4b, 2803:f800:50::6ca2:c04b, 2a06:98c1:50::ac40:204b, 108.162.192.75, 172.64.32.75 and 173.245.58.75.

cartman.ns.cloudflare.com points to 2606:4700:58::a29f:2cdb, 2803:f800:50::6ca2:c3db, 2a06:98c1:50::ac40:23db, 108.162.195.219, 162.159.44.219 and 172.64.35.219.

Mail Servers

cdacovid.com is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com.

cdacovid.com shares at least partially some mail servers with other domains, for instance chadandjanessa.com, dougsites.com, keyholeky.com, fastpayfunding.com and goldese.com.

These mail servers are often used with eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names with a single IP number:

The name eforward1.registrar-servers.com points to 162.255.118.51.

The name eforward2.registrar-servers.com points to 162.255.118.52.

The name eforward3.registrar-servers.com points to 162.255.118.51.

The name eforward4.registrar-servers.com points to 162.255.118.52.

The name eforward5.registrar-servers.com points to 162.255.118.51.

Hostnames pointing to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

Hostnames pointing to 162.255.118.52: eforward2.registrar-servers.com and eforward4.registrar-servers.com.

cdacovid.com - robtex.com

cdacovid.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`cdacovid.com`

`com`