`drain2wallet.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:3f69^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:aa8f^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.63.105^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.170.143^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`autumn.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2694^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`autumn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c294^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`autumn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2294^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`autumn.ns.cloudflare.com`
		A	108.162.194.148^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`autumn.ns.cloudflare.com`
		A	162.159.38.148^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`autumn.ns.cloudflare.com`
		A	172.64.34.148^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`autumn.ns.cloudflare.com`
NS	`rohin.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c99^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rohin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c399^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rohin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2399^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rohin.ns.cloudflare.com`
		A	108.162.195.153^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rohin.ns.cloudflare.com`
		A	162.159.44.153^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rohin.ns.cloudflare.com`
		A	172.64.35.153^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rohin.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.63.105, 172.67.170.143
		IPv6	2606:4700:3032::6815:3f69, 2606:4700:3036::ac43:aa8f
SOA	`autumn.ns.cloudflare.com`dns@cloudflare.com serial=2399528978

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775024597

Same first word

drain2wallet.com

DNS History

10 records (6 active, 4 former)

●NSautumn.ns.cloudflare.com2026-03-21 → 2026-04-01 · 2 obs

● 2026-03-21 18:55:50
● 2026-04-01 06:44:36

●NSrohin.ns.cloudflare.com2026-03-21 → 2026-04-01 · 2 obs

● 2026-03-21 18:55:50
● 2026-04-01 06:44:36

●A104.21.63.1052026-04-01 → 2026-04-01 · 2 obs

○ 2026-03-21 18:55:50
● 2026-04-01 06:44:36

●A172.67.170.1432026-04-01 → 2026-04-01 · 2 obs

○ 2026-03-21 18:55:50
● 2026-04-01 06:44:36

○A188.114.96.02026-03-21 → 2026-03-21 · 2 obs

● 2026-03-21 18:55:50
○ 2026-04-01 06:44:36

○A188.114.97.02026-03-21 → 2026-03-21 · 2 obs

● 2026-03-21 18:55:50
○ 2026-04-01 06:44:36

●A2606:4700:3032::6815:3f692026-04-01 → 2026-04-01 · 2 obs

○ 2026-03-21 18:55:50
● 2026-04-01 06:44:36

●A2606:4700:3036::ac43:aa8f2026-04-01 → 2026-04-01 · 2 obs

○ 2026-03-21 18:55:50
● 2026-04-01 06:44:36

○A2a06:98c1:3120::2026-03-21 → 2026-03-21 · 2 obs

● 2026-03-21 18:55:50
○ 2026-04-01 06:44:36

○A2a06:98c1:3121::2026-03-21 → 2026-03-21 · 2 obs

● 2026-03-21 18:55:50
○ 2026-04-01 06:44:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
drain2wallet.com	autumn.ns.cloudflare.com, rohin.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.153

NS records: autumn.ns.cloudflare.com, rohin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for drain2wallet.com (unsigned zone)

⏱️ Timing

Total: 142ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.63.105, 172.67.170.143`
AAAA	2	`2606:4700:3032::6815:3f69, 2606:4700:3036::ac43:aa8f`
NS	2	`autumn.ns.cloudflare.com, rohin.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`autumn.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (autumn.ns.cloudflare.com, autumn.ns.cloudflare.com, autumn.ns.cloudflare.com...)

Analysis

IP Addresses

drain2wallet.com points to four IP numbers: 2606:4700:3032::6815:3f69, 2606:4700:3036::ac43:aa8f, 104.21.63.105 and 172.67.170.143.

Other host names including www.jakkapatlotto.net, thingreenline.org.au, encuentros-casuales.com, pphct.com and itkezhan.com share IP numbers with drain2wallet.com.

Name Servers

drain2wallet.com's delegation uses two name servers, autumn.ns.cloudflare.com and rohin.ns.cloudflare.com.

drain2wallet.com shares the same name server setup as other domains, for instance baletrbk.ru.

drain2wallet.com at least partially shares name servers with other domains, including palmigatru.workers.dev, 365susu.com, 792929.com, duruk.net and gwtcorp.com.

These name servers are commonly used with kira.ns.cloudflare.com and dakota.ns.cloudflare.com.

Host names with six IP numbers:

autumn.ns.cloudflare.com points to: 2606:4700:50::a29f:2694, 2803:f800:50::6ca2:c294, 2a06:98c1:50::ac40:2294, 108.162.194.148, 162.159.38.148 and 172.64.34.148.

rohin.ns.cloudflare.com points to: 2606:4700:58::a29f:2c99, 2803:f800:50::6ca2:c399, 2a06:98c1:50::ac40:2399, 108.162.195.153, 162.159.44.153 and 172.64.35.153.

drain2wallet.com - robtex.com