`gfir-cnc.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:1609^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:c9b1^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.22.9^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.201.177^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cloe.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a56^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c056^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cloe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2056^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cloe.ns.cloudflare.com`
		A	108.162.192.86^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	172.64.32.86^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	173.245.58.86^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
NS	`vicente.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cef^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vicente.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3ef^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`vicente.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23ef^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`vicente.ns.cloudflare.com`
		A	108.162.195.239^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vicente.ns.cloudflare.com`
		A	162.159.44.239^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vicente.ns.cloudflare.com`
		A	172.64.35.239^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vicente.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.22.9, 172.67.201.177
		IPv6 hints	2606:4700:3031::6815:1609, 2606:4700:3034::ac43:c9b1
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=192, name=cloudflare-ech.com
SOA	`cloe.ns.cloudflare.com`dns@cloudflare.com serial=2410469824

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786513509

Same first word

gfir-cnc.com

DNS History

17 records (6 active, 11 former)

●NScloe.ns.cloudflare.com2026-03-29 → 2026-08-12 · 3 obs

○ 2026-03-02 07:38:30
● 2026-03-29 11:30:56
● 2026-08-12 05:48:12

○NSdns.bizcn.com2019-12-17 → 2019-12-17 · 3 obs

● 2019-12-17 07:16:14
○ 2026-03-02 07:38:30
○ 2026-08-12 05:48:12

○NSlochlan.ns.cloudflare.com2026-03-02 → 2026-03-02 · 4 obs

○ 2019-12-17 07:16:14
● 2026-03-02 07:38:30
○ 2026-03-29 11:30:56
○ 2026-08-12 05:48:12

○NSmeiling.ns.cloudflare.com2026-03-02 → 2026-03-02 · 4 obs

○ 2019-12-17 07:16:14
● 2026-03-02 07:38:30
○ 2026-03-29 11:30:56
○ 2026-08-12 05:48:12

○NSns7.cnmsn.net2019-12-17 → 2019-12-17 · 3 obs

● 2019-12-17 07:16:14
○ 2026-03-02 07:38:30
○ 2026-08-12 05:48:12

○NSns8.cnmsn.net2019-12-17 → 2019-12-17 · 3 obs

● 2019-12-17 07:16:14
○ 2026-03-02 07:38:30
○ 2026-08-12 05:48:12

●NSvicente.ns.cloudflare.com2026-03-29 → 2026-08-12 · 3 obs

○ 2026-03-02 07:38:30
● 2026-03-29 11:30:56
● 2026-08-12 05:48:12

●A104.21.22.92026-08-12 → 2026-08-12 · 2 obs

○ 2026-08-05 03:19:04
● 2026-08-12 05:48:12

○A154.88.70.172026-03-29 → 2026-06-15 · 5 obs

○ 2026-03-02 07:38:30
● 2026-03-29 11:30:56
● 2026-06-15 11:22:32
○ 2026-08-05 03:19:04
○ 2026-08-12 05:48:12

○A156.224.68.1902026-03-02 → 2026-03-02 · 3 obs

● 2026-03-02 07:38:30
○ 2026-03-29 11:30:56
○ 2026-08-12 05:48:12

●A172.67.201.1772026-08-12 → 2026-08-12 · 2 obs

○ 2026-08-05 03:19:04
● 2026-08-12 05:48:12

○A188.114.96.02026-08-05 → 2026-08-05 · 3 obs

○ 2026-06-15 11:22:32
● 2026-08-05 03:19:04
○ 2026-08-12 05:48:12

○A188.114.97.02026-08-05 → 2026-08-05 · 3 obs

○ 2026-06-15 11:22:32
● 2026-08-05 03:19:04
○ 2026-08-12 05:48:12

●A2606:4700:3031::6815:16092026-08-12 → 2026-08-12 · 2 obs

○ 2026-08-05 03:19:04
● 2026-08-12 05:48:12

●A2606:4700:3034::ac43:c9b12026-08-12 → 2026-08-12 · 2 obs

○ 2026-08-05 03:19:04
● 2026-08-12 05:48:12

○A2a06:98c1:3120::2026-08-05 → 2026-08-05 · 3 obs

○ 2026-06-15 11:22:32
● 2026-08-05 03:19:04
○ 2026-08-12 05:48:12

○A2a06:98c1:3121::2026-08-05 → 2026-08-05 · 3 obs

○ 2026-06-15 11:22:32
● 2026-08-05 03:19:04
○ 2026-08-12 05:48:12

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	f.gtld-servers.net, c.gtld-servers.net, h.gtld-servers.net, k.gtld-servers.net...	-
gfir-cnc.com	cloe.ns.cloudflare.com, vicente.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.86

NS records: cloe.ns.cloudflare.com, vicente.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for gfir-cnc.com (unsigned zone)

⏱️ Timing

Total: 222ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.22.9, 172.67.201.177`
AAAA	2	`2606:4700:3031::6815:1609, 2606:4700:3034::ac43:c9b1`
NS	2	`cloe.ns.cloudflare.com, vicente.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cloe.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (cloe.ns.cloudflare.com, cloe.ns.cloudflare.com, cloe.ns.cloudflare.com...)

Analysis

IP Addresses

gfir-cnc.com resolves to four IP addresses: 104.21.22.9, 172.67.201.177, 2606:4700:3031::6815:1609 and 2606:4700:3034::ac43:c9b1.

Among the host names that share IP numbers with gfir-cnc.com are gamedojovault.com, kladween.com, ailesson.dev and two others.

Name Servers

The NS records for gfir-cnc.com delegate to cloe.ns.cloudflare.com and vicente.ns.cloudflare.com.

gfir-cnc.com has the same name server delegation as a number of other domains, such as scxldz.com, sdgrgy.com, ddrsl.com and two more.

gfir-cnc.com has at least partial name server overlap with other domains, such as michaels.pics, yannas-home.com, ljxxuanyin.com and two others.

It is common to find these name servers paired with the name servers norman.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

cloe.ns.cloudflare.com maps to 108.162.192.86, 172.64.32.86, 173.245.58.86 and 3 additional IP addresses.

vicente.ns.cloudflare.com maps to 108.162.195.239, 162.159.44.239, 172.64.35.239 and 3 additional IP addresses.

gfir-cnc.com - robtex.com

gfir-cnc.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`gfir-cnc.com`

`com`