cssfraud.com - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

cssfraud.com

DNSSEC⚠️ Not signed
A12.163.16.217πŸ‡ΊπŸ‡Έ AS1716612.163.16.0/21 TRAVELERSINC
NSttbloxncdns88.travp.net ⭐
NSdnsnr1.travelers.com
A12.163.16.2πŸ‡ΊπŸ‡Έ AS1716612.163.16.0/21 TRAVELERSINC
NSdnsnr2.travelers.com
A170.202.174.2πŸ‡ΊπŸ‡Έ AS17166170.202.174.0/24 SP_TRAVELERS
PTRdnsnr2.travelers.com
NSdnssr1.travelers.com
A170.202.78.2πŸ‡ΊπŸ‡Έ AS23381170.202.78.0/24 TRAVELERSINC
PTRdnssr1.travelers.com
NSdnssr2.travelers.com
A170.202.78.4πŸ‡ΊπŸ‡Έ AS23381170.202.78.0/24 TRAVELERSINC
PTRdnssr2.travelers.com
TXTv=spf1 ip4:170.202.0.0/16 ~all
SOAttbloxncdns88.travp.netsdaley@travelers.com 2010-05-31 #7

com

Same first word

Previous names

Next names

DNS History

12 records (6 active, 6 former)

2008201020122014201620182020202220242026NSdnsnr1.travelers.comdnsnr2.travelers.comdnssr1.travelers.comdnssr2.travelers.comttbloxncdns88.travp.netdnshr1.travelers.comttbloxncdns7.travp.netttbloxncdns77.travp.netttbloxncdns9.travp.netttbloxomdns7.travp.netttbloxomdns77.travp.netA12.163.16.217
β—‹NSdnshr1.travelers.com2007-11-07 β†’ 2007-11-07 Β· 3 obs
● 2007-11-07 08:40:40
β—‹ 2015-05-27 22:35:54
β—‹ 2026-08-31 18:35:18
●NSdnsnr1.travelers.com2007-11-07 β†’ 2026-08-31 Β· 5 obs
● 2007-11-07 08:40:40
● 2015-10-18 12:45:12
β—‹ 2015-11-11 17:27:58
● 2017-07-28 13:34:52
● 2026-08-31 18:35:18
●NSdnsnr2.travelers.com2015-05-27 β†’ 2026-08-31 Β· 3 obs
β—‹ 2007-11-07 08:40:40
● 2015-05-27 22:35:54
● 2026-08-31 18:35:18
●NSdnssr1.travelers.com2015-05-27 β†’ 2026-08-31 Β· 3 obs
β—‹ 2007-11-07 08:40:40
● 2015-05-27 22:35:54
● 2026-08-31 18:35:18
●NSdnssr2.travelers.com2015-05-27 β†’ 2026-08-31 Β· 3 obs
β—‹ 2007-11-07 08:40:40
● 2015-05-27 22:35:54
● 2026-08-31 18:35:18
β—‹NSttbloxncdns7.travp.net2015-11-11 β†’ 2015-11-11 Β· 4 obs
β—‹ 2015-10-18 12:45:12
● 2015-11-11 17:27:58
β—‹ 2016-02-06 05:29:18
β—‹ 2026-08-31 18:35:18
β—‹NSttbloxncdns77.travp.net2026-08-30 β†’ 2026-08-30 Β· 4 obs
β—‹ 2026-08-29 04:37:36
● 2026-08-30 18:54:30
β—‹ 2026-08-31 18:07:00
β—‹ 2026-08-31 18:35:18
●NSttbloxncdns88.travp.net2026-08-28 β†’ 2026-08-31 Β· 7 obs
β—‹ 2026-08-25 09:48:34
● 2026-08-28 12:08:48
β—‹ 2026-08-28 20:57:36
● 2026-08-29 04:37:36
β—‹ 2026-08-30 18:54:30
● 2026-08-31 18:07:00
● 2026-08-31 18:35:18
β—‹NSttbloxncdns9.travp.net2016-02-06 β†’ 2017-07-28 Β· 6 obs
β—‹ 2015-11-11 17:27:58
● 2016-02-06 05:29:18
β—‹ 2016-12-04 09:21:36
● 2017-07-28 13:34:52
β—‹ 2026-08-25 09:48:34
β—‹ 2026-08-31 18:35:18
β—‹NSttbloxomdns7.travp.net2016-12-04 β†’ 2016-12-04 Β· 4 obs
β—‹ 2016-02-06 05:29:18
● 2016-12-04 09:21:36
β—‹ 2017-07-28 13:34:52
β—‹ 2026-08-31 18:35:18
β—‹NSttbloxomdns77.travp.net2026-08-25 β†’ 2026-08-28 Β· 6 obs
β—‹ 2017-07-28 13:34:52
● 2026-08-25 09:48:34
β—‹ 2026-08-28 12:08:48
● 2026-08-28 20:57:36
β—‹ 2026-08-29 04:37:36
β—‹ 2026-08-31 18:35:18
●A12.163.16.2172007-11-07 β†’ 2026-08-31 Β· 2 obs
● 2007-11-07 08:40:40
● 2026-08-31 18:35:18

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
comk.gtld-servers.net, d.gtld-servers.net, f.gtld-servers.net, i.gtld-servers.net...-
cssfraud.comdnsnr1.travelers.com, dnsnr2.travelers.com, dnssr1.travelers.com, dnssr2.travelers.com4 records

βœ… Authoritative Response

Server:170.202.78.4

NS records: dnsnr1.travelers.com, dnsnr2.travelers.com, dnssr1.travelers.com, dnssr2.travelers.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cssfraud.com (unsigned zone)

⏱️ Timing

Total: 1065ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A112.163.16.217
NS4dnsnr2.travelers.com, dnsnr1.travelers.com...
TXT1v=spf1 ip4:170.202.0.0/16 ~all
SOA1ttbloxomdns88.travp.net sdaley.travelers

πŸ“Œ Glue Records Collected

Total: 4

Out-of-bailiwick: 4 (dnsnr1.travelers.com, dnsnr2.travelers.com, dnssr1.travelers.com...)

Analysis

IP Addresses

cssfraud.com resolves to one IP address: 12.163.16.217.

eft.travelers.com, aespecialty.com, hrjobs.travelers.com and two other host names share IP numbers with cssfraud.com.

Name Servers

cssfraud.com has five name servers, which are dnsnr1.travelers.com, dnsnr2.travelers.com, dnssr1.travelers.com and two others.

At least some of cssfraud.com's name servers are shared with other domains, for example northfieldins.com, premierins.com, ftico.com and two more.

These name servers tend to co-occur with dnssr2.travelers.com, dnshr1.travelers.com, ttbloxomdns77.travp.net and 3 other name servers in the same DNS delegations.

Each of the four hosts dnsnr1.travelers.com, dnsnr2.travelers.com, dnssr1.travelers.com and dnssr2.travelers.com points to a single IP address β€” dnsnr1.travelers.com points to 12.163.16.2, dnsnr2.travelers.com points to 170.202.174.2, dnssr1.travelers.com points to 170.202.78.2 and dnssr2.travelers.com points to 170.202.78.4.