`fraudulent-google.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::6815:177e^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:d317^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.23.126^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.211.23^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bob.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b68^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bob.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c168^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bob.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2168^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bob.ns.cloudflare.com`
		A	108.162.193.104^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bob.ns.cloudflare.com`
		A	172.64.33.104^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bob.ns.cloudflare.com`
		A	173.245.59.104^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bob.ns.cloudflare.com`
NS	`nola.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ad4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nola.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0d4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nola.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20d4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nola.ns.cloudflare.com`
		A	108.162.192.212^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nola.ns.cloudflare.com`
		A	172.64.32.212^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nola.ns.cloudflare.com`
		A	173.245.58.212^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nola.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.23.126, 172.67.211.23
		IPv6 hints	2606:4700:3036::6815:177e, 2606:4700:3036::ac43:d317
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=185, name=cloudflare-ech.com
SOA	`bob.ns.cloudflare.com`dns@cloudflare.com serial=2401066895

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1776054897

⚠️ On DNS blocklist: light, multi, pro, pro.plus, tif, ultimate

Same first word

fraudulent-google.com

DNS History

6 records (6 active, 0 former)

●NSbob.ns.cloudflare.com2026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

●NSnola.ns.cloudflare.com2026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

●A104.21.23.1262026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

●A172.67.211.232026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

●A2606:4700:3036::6815:177e2026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

●A2606:4700:3036::ac43:d3172026-04-10 → 2026-04-13 · 2 obs

● 2026-04-10 18:04:20
● 2026-04-13 04:41:06

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net...	-
fraudulent-google.com	bob.ns.cloudflare.com, nola.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.104

NS records: bob.ns.cloudflare.com, nola.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for fraudulent-google.com (unsigned zone)

⏱️ Timing

Total: 153ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.211.23, 104.21.23.126`
AAAA	2	`2606:4700:3036::ac43:d317, 2606:4700:3036::6815:177e`
NS	2	`bob.ns.cloudflare.com, nola.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bob.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (bob.ns.cloudflare.com, bob.ns.cloudflare.com, bob.ns.cloudflare.com...)

Analysis

IP Addresses

fraudulent-google.com maps to four IP numbers: 2606:4700:3036::6815:177e, 2606:4700:3036::ac43:d317, 104.21.23.126 and 172.67.211.23.

Other host names, for instance yabonujoqonanalytics.sbs, openleft.com, amerginconsulting.com, fb7k.com.cdn.cloudflare.net and nuvida.com share IP numbers with fraudulent-google.com.

Name Servers

Two name servers bob.ns.cloudflare.com and nola.ns.cloudflare.com handle delegation for fraudulent-google.com.

fraudulent-google.com uses the same name server setup as other domains, for example restaurantedelangel.com, funasfjallen.se, colegio-simonbolivar.com, al(0x666170)acimpresion.com and alptel.ch.

fraudulent-google.com partially shares name servers with other domains; examples include veza360.com, pathuman.com, unigen.com.tr, hellomyschoolbag.com and arrowsforcharity.org.

These name servers are commonly used with hayes.ns.cloudflare.com, abby.ns.cloudflare.com and may.ns.cloudflare.com.

Host names with six IP numbers: bob.ns.cloudflare.com points to: 2606:4700:58::adf5:3b68, 2803:f800:50::6ca2:c168, 2a06:98c1:50::ac40:2168, 108.162.193.104, 172.64.33.104 and 173.245.59.104; nola.ns.cloudflare.com points to: 2606:4700:50::adf5:3ad4, 2803:f800:50::6ca2:c0d4, 2a06:98c1:50::ac40:20d4, 108.162.192.212, 172.64.32.212 and 173.245.58.212.

fraudulent-google.com - robtex.com