fraudavoid.com - robtex.com

fraudavoid.com

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:3e2a🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:dbf5🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.62.42Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.219.245🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSrita.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a8c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A2803:f800:50::6ca2:c08c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrita.ns.cloudflare.com
A2a06:98c1:50::ac40:208c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRrita.ns.cloudflare.com
A108.162.192.140🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A172.64.32.140🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A173.245.58.140🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
NStheo.ns.cloudflare.com
A2606:4700:58::adf5:3b90🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtheo.ns.cloudflare.com
A2803:f800:50::6ca2:c190🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtheo.ns.cloudflare.com
A2a06:98c1:50::ac40:2190🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtheo.ns.cloudflare.com
A108.162.193.144🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtheo.ns.cloudflare.com
A172.64.33.144🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtheo.ns.cloudflare.com
A173.245.59.144🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtheo.ns.cloudflare.com
MXheracles-relay.mxrouting.net ⭐
A65.109.144.50🇫🇮 Hetzner65.109.0.0/16 HETZNER-DC
PTRstatic.50.144.109.65.clients.your-server.de
MXmx.yandex.net ⭐
A2a02:6b8::311🇷🇺 TELETECH2a02:6b8::/32 Yandex network
PTRmxfront.stable.qloud-b.yandex.net
A77.88.21.249🇷🇺 TELETECH77.88.0.0/18 Yandex enterprise network
PTRmxfront.stable.qloud-b.yandex.net
MXheracles.mxrouting.net(20)
A65.109.144.50🇫🇮 Hetzner65.109.0.0/16 HETZNER-DC
PTRstatic.50.144.109.65.clients.your-server.de
TXTv=spf1 include:mxlogin.com -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4104.21.62.42, 172.67.219.245
IPv62606:4700:3031::6815:3e2a, 2606:4700:3037::ac43:dbf5
SOArita.ns.cloudflare.comdns@cloudflare.com serial=2398556953

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1771291435

Same first word

fraudavoid.com

DNS History

13 records (9 active, 4 former)

NSrita.ns.cloudflare.comtheo.ns.cloudflare.comMXheracles-relay.mxrouting.netheracles.mxrouting.netmx.yandex.netA104.21.62.42172.67.219.2452606:4700:3031::6815:3e2a2606:4700:3037::ac43:dbf5188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSrita.ns.cloudflare.com2026-03-08 → 2026-03-23 · 2 obs
● 2026-03-08 03:55:02
● 2026-03-23 19:42:12
●NStheo.ns.cloudflare.com2026-03-08 → 2026-03-23 · 2 obs
● 2026-03-08 03:55:02
● 2026-03-23 19:42:12
●MXheracles-relay.mxrouting.net2026-03-08 → 2026-03-23 · 2 obs
● 2026-03-08 03:55:02
● 2026-03-23 19:42:12
●MXheracles.mxrouting.net2026-03-08 → 2026-03-23 · 2 obs
● 2026-03-08 03:55:02
● 2026-03-23 19:42:12
●MXmx.yandex.net2026-03-08 → 2026-03-23 · 2 obs
● 2026-03-08 03:55:02
● 2026-03-23 19:42:12
●A104.21.62.422026-03-18 → 2026-03-23 · 3 obs
○ 2026-03-08 03:55:02
● 2026-03-18 06:56:10
● 2026-03-23 19:42:12
●A172.67.219.2452026-03-18 → 2026-03-23 · 3 obs
○ 2026-03-08 03:55:02
● 2026-03-18 06:56:10
● 2026-03-23 19:42:12
○A188.114.96.02026-03-08 → 2026-03-08 · 3 obs
● 2026-03-08 03:55:02
○ 2026-03-18 06:56:10
○ 2026-03-23 19:42:12
○A188.114.97.02026-03-08 → 2026-03-08 · 3 obs
● 2026-03-08 03:55:02
○ 2026-03-18 06:56:10
○ 2026-03-23 19:42:12
●A2606:4700:3031::6815:3e2a2026-03-18 → 2026-03-23 · 3 obs
○ 2026-03-08 03:55:02
● 2026-03-18 06:56:10
● 2026-03-23 19:42:12
●A2606:4700:3037::ac43:dbf52026-03-18 → 2026-03-23 · 3 obs
○ 2026-03-08 03:55:02
● 2026-03-18 06:56:10
● 2026-03-23 19:42:12
○A2a06:98c1:3120::2026-03-08 → 2026-03-08 · 3 obs
● 2026-03-08 03:55:02
○ 2026-03-18 06:56:10
○ 2026-03-23 19:42:12
○A2a06:98c1:3121::2026-03-08 → 2026-03-08 · 3 obs
● 2026-03-08 03:55:02
○ 2026-03-18 06:56:10
○ 2026-03-23 19:42:12

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
fraudavoid.comrita.ns.cloudflare.com, theo.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.192.140

NS records: rita.ns.cloudflare.com, theo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for fraudavoid.com (unsigned zone)

⏱️ Timing

Total: 368ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.62.42, 172.67.219.245
AAAA22606:4700:3031::6815:3e2a, 2606:4700:3037::ac43:dbf5
NS2rita.ns.cloudflare.com, theo.ns.cloudflare.com
MX3heracles.mxrouting.net (pri: 10), mx.yandex.net (pri: 10)...
TXT1v=spf1 include:mxlogin.com -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1rita.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (rita.ns.cloudflare.com, rita.ns.cloudflare.com, rita.ns.cloudflare.com...)

Analysis

IP Addresses

fraudavoid.com points to four IP numbers: 2606:4700:3031::6815:3e2a, 2606:4700:3037::ac43:dbf5, 104.21.62.42 and 172.67.219.245.

Other host names, for instance mmuccx.sa.com, www.culbokiect.org, 99online.de, tevera.net and sorean.ca share IP numbers with fraudavoid.com.

Name Servers

fraudavoid.com is delegated to two name servers: rita.ns.cloudflare.com and theo.ns.cloudflare.com.

fraudavoid.com uses the same name server setup as other domains, for instance startfu.com, thekirtan.com, mobility.mobi, moboaff.com and jobja.com.

fraudavoid.com shares name servers with other domains at least partially, for instance tibianews.net, firehost.co.uk, al(0x666170)orno.net, displaymonkey.org and trinity-tv.net.

these name servers are often used together with the name servers galilea.ns.cloudflare.com.

Host names with six IP numbers: rita.ns.cloudflare.com points to 2606:4700:50::adf5:3a8c, 2803:f800:50::6ca2:c08c, 2a06:98c1:50::ac40:208c, 108.162.192.140, 172.64.32.140 and 173.245.58.140; theo.ns.cloudflare.com points to 2606:4700:58::adf5:3b90, 2803:f800:50::6ca2:c190, 2a06:98c1:50::ac40:2190, 108.162.193.144, 172.64.33.144 and 173.245.59.144.

Mail Servers

fraudavoid.com is handled by three mail servers: heracles-relay.mxrouting.net, heracles.mxrouting.net and mx.yandex.net.

fraudavoid.com shares some mail servers with other domains, including vxc.app, o5cat.ru, k53.ru, cybertrust.io and mankor.ru.

Two IPs for mx.yandex.net: 2a02:6b8::311 and 77.88.21.249

One IP for heracles-relay.mxrouting.net: 65.109.144.50

heracles.mxrouting.net points to 65.109.144.50

Names pointing to 65.109.144.50: heracles-relay.mxrouting.net and heracles.mxrouting.net