`cnc-files.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:9aad^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:5c0^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.5.192^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.154.173^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`hans.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3baf^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hans.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1af^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`hans.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21af^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`hans.ns.cloudflare.com`
		A	108.162.193.175^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hans.ns.cloudflare.com`
		A	172.64.33.175^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hans.ns.cloudflare.com`
		A	173.245.59.175^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hans.ns.cloudflare.com`
NS	`sarah.ns.cloudflare.com`
		A	2606:4700:50::a29f:26da^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sarah.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sarah.ns.cloudflare.com`
		A	108.162.194.218^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	162.159.38.218^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	172.64.34.218^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
MX	`mx2.zoho.com` ⭐
		A	136.143.183.44^{🇺🇸 ZohoAS136.143.182.0/23 Zoho}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx.zoho.com`⁽²⁰⁾
		A	136.143.183.44^{🇺🇸 ZohoAS136.143.182.0/23 Zoho}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
		A	204.141.43.44^{🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
MX	`mx3.zoho.com`⁽⁵⁰⁾
		A	204.141.43.44^{🇺🇸 ZohoAS204.141.42.0/23 Zoho Corporation}
			PTR	`mx2.zoho.com`
			PTR	`mx3.zoho.com`
			PTR	`mx6.zoho.com`
			PTR	`mx7.zoho.com`
			PTR	`mx8.zoho.com`
			PTR	`mx.zoho.com`
			PTR	`mx2.zohomail.com`
			PTR	`mx3.zohomail.com`
			PTR	`mx.zohomail.com`
TXT	`google-site-verification=_8oIiSh_vEynmxOy7LXSV75s17deGmWN0vzaM9zQvsc`
TXT	`v=spf1 include:zohomail.com -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.5.192, 172.67.154.173
		IPv6	2606:4700:3031::ac43:9aad, 2606:4700:3035::6815:5c0
SOA	`hans.ns.cloudflare.com`dns@cloudflare.com serial=2399724565

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

WOT: SAFE (64/100)

Same first word

cnc-files.com

DNS History

15 records (9 active, 6 former)

○NSdns1.registrar-servers.com2015-06-18 → 2017-09-17 · 4 obs

● 2015-06-18 02:12:42
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

○NSdns2.registrar-servers.com2015-10-31 → 2017-09-17 · 5 obs

○ 2015-06-18 02:12:42
● 2015-10-31 14:18:10
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

○NSdns3.registrar-servers.com2015-10-31 → 2017-09-17 · 5 obs

○ 2015-06-18 02:12:42
● 2015-10-31 14:18:10
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

○NSdns4.registrar-servers.com2015-10-31 → 2017-09-17 · 5 obs

○ 2015-06-18 02:12:42
● 2015-10-31 14:18:10
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

○NSdns5.registrar-servers.com2015-10-31 → 2017-09-17 · 5 obs

○ 2015-06-18 02:12:42
● 2015-10-31 14:18:10
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

●NShans.ns.cloudflare.com2026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●NSsarah.ns.cloudflare.com2026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●MXmx.zoho.com2026-03-22 → 2026-03-23 · 2 obs

● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●MXmx2.zoho.com2026-03-22 → 2026-03-23 · 2 obs

● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●MXmx3.zoho.com2026-03-22 → 2026-03-23 · 2 obs

● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●A104.21.5.1922026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●A172.67.154.1732026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

○A192.64.119.722015-06-18 → 2017-09-17 · 5 obs

○ 2008-03-19 20:17:40
● 2015-06-18 02:12:42
● 2017-09-17 06:12:20
○ 2026-03-22 00:37:00
○ 2026-03-23 15:36:32

●A2606:4700:3031::ac43:9aad2026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

●A2606:4700:3035::6815:5c02026-03-22 → 2026-03-23 · 3 obs

○ 2017-09-17 06:12:20
● 2026-03-22 00:37:00
● 2026-03-23 15:36:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	c.gtld-servers.net, j.gtld-servers.net, d.gtld-servers.net, b.gtld-servers.net...	-
cnc-files.com	hans.ns.cloudflare.com, sarah.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.218

NS records: hans.ns.cloudflare.com, sarah.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cnc-files.com (unsigned zone)

⏱️ Timing

Total: 174ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.5.192, 172.67.154.173`
AAAA	2	`2606:4700:3035::6815:5c0, 2606:4700:3031::ac43:9aad`
NS	2	`hans.ns.cloudflare.com, sarah.ns.cloudflare.com`
MX	3	`mx.zoho.com (pri: 10), mx3.zoho.com (pri: 20)...`
TXT	2	`google-site-verification=_8oIiSh_vEynmxO, v=spf1 include:zohomail.com -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`hans.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (hans.ns.cloudflare.com, hans.ns.cloudflare.com, hans.ns.cloudflare.com...)

Analysis

IP Addresses

cnc-files.com maps to four IP numbers: 2606:4700:3031::ac43:9aad, 2606:4700:3035::6815:5c0, 104.21.5.192 and 172.67.154.173.

other host names include zeus-vip.com, med-anatom.ru, theintrepidguide.com, missafir.com and algoha.com; they share IP numbers with cnc-files.com.

Name Servers

Two name servers hans.ns.cloudflare.com and sarah.ns.cloudflare.com handle the delegation for cnc-files.com.

cnc-files.com shares the same name server setup as other domains, for instance alarmclockonline.com, designdxf.com, incacontabil.com, cubed.ie and phishportal.com.

cnc-files.com at least partially shares name servers with other domains, for instance huntleyrealtor.com, ukscholarships.uk, tianchenghuanbao.com, beaverhome.ca and dentistsrusaz.com.

These name servers are commonly used alongside brenda.ns.cloudflare.com.

Six IP addresses per host:

hans.ns.cloudflare.com points to 2606:4700:58::adf5:3baf, 2803:f800:50::6ca2:c1af, 2a06:98c1:50::ac40:21af, 108.162.193.175, 172.64.33.175 and 173.245.59.175; sarah.ns.cloudflare.com points to 2606:4700:50::a29f:26da, 2803:f800:50::6ca2:c2da, 2a06:98c1:50::ac40:22da, 108.162.194.218, 162.159.38.218 and 172.64.34.218

Mail Servers

Three mail servers handle cnc-files.com: mx2.zoho.com, mx3.zoho.com and mx.zoho.com.

cnc-files.com shares at least partially some mail servers with other domains, for instance goshopart.com, thegrantclan.org, sigtrade.net, digitalpomegranate.com and yatilabs.com.

Host names by IP count:

Two IP numbers: mx.zoho.com points to 136.143.183.44 and 204.141.43.44.

One IP number: mx2.zoho.com points to 136.143.183.44; mx3.zoho.com points to 204.141.43.44.

Host names that point to 136.143.183.44: mx.zoho.com and mx2.zoho.com.

Host names that point to 204.141.43.44: mx.zoho.com and mx3.zoho.com.

cnc-files.com - robtex.com

cnc-files.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`cnc-files.com`

`com`