`koboldthief.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:1bf4^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3030::ac43:8fad^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.27.244^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.143.173^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`anahi.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2618^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anahi.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c218^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`anahi.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2218^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`anahi.ns.cloudflare.com`
		A	108.162.194.24^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anahi.ns.cloudflare.com`
		A	162.159.38.24^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anahi.ns.cloudflare.com`
		A	172.64.34.24^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anahi.ns.cloudflare.com`
NS	`clark.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b57^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clark.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c157^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`clark.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2157^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`clark.ns.cloudflare.com`
		A	108.162.193.87^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clark.ns.cloudflare.com`
		A	172.64.33.87^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clark.ns.cloudflare.com`
		A	173.245.59.87^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`clark.ns.cloudflare.com`
MX	`_dc-mx.52d5c559cd27.koboldthief.com` ⭐
		A	45.79.109.47^{🇺🇸 AKAMAI-LINODE-AP45.79.96.0/20 Akamai Technologies}
			PTR	`li1208-47.members.linode.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.27.244, 172.67.143.173
		IPv6 hints	2606:4700:3030::6815:1bf4, 2606:4700:3030::ac43:8fad
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=99, name=cloudflare-ech.com
SOA	`anahi.ns.cloudflare.com`dns@cloudflare.com serial=2403257958

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778450671

Subdomains

mail.koboldthief.com

Same first word

koboldthief.com

DNS History

14 records (7 active, 7 former)

●NSanahi.ns.cloudflare.com2026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

●NSclark.ns.cloudflare.com2026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

○NSns1.linode.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

○NSns2.linode.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

○NSns3.linode.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

○NSns4.linode.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

○NSns5.linode.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

●MX_dc-mx.52d5c559cd27.koboldthief.com2026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

○MXmail.koboldthief.com2015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

●A104.21.27.2442026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

●A172.67.143.1732026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

●A2606:4700:3030::6815:1bf42026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

●A2606:4700:3030::ac43:8fad2026-04-03 → 2026-05-10 · 3 obs

○ 2017-06-25 18:45:10
● 2026-04-03 02:48:16
● 2026-05-10 22:23:26

○A66.175.217.982015-06-11 → 2017-06-25 · 4 obs

● 2015-06-11 18:42:06
● 2017-06-25 18:45:10
○ 2026-04-03 02:48:16
○ 2026-05-10 22:23:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	g.gtld-servers.net, b.gtld-servers.net, i.gtld-servers.net, h.gtld-servers.net...	-
koboldthief.com	clark.ns.cloudflare.com, anahi.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.87

NS records: clark.ns.cloudflare.com, anahi.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for koboldthief.com (unsigned zone)

⏱️ Timing

Total: 374ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.143.173, 104.21.27.244`
AAAA	2	`2606:4700:3030::6815:1bf4, 2606:4700:3030::ac43:8fad`
NS	2	`anahi.ns.cloudflare.com, clark.ns.cloudflare.com`
MX	1	`_dc-mx.52d5c559cd27.koboldthief.com (pri`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`anahi.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (clark.ns.cloudflare.com, clark.ns.cloudflare.com, clark.ns.cloudflare.com...)

Analysis

Hierarchy

The parent of mail.koboldthief.com is koboldthief.com.

IP Addresses

koboldthief.com maps to four IP numbers: 2606:4700:3030::6815:1bf4, 2606:4700:3030::ac43:8fad, 104.21.27.244 and 172.67.143.173.

Other host names such as www.magellanrx.com, lotoyiyayiiaresources21.buzz, prisma.global, www.netlook.cz and osukazu.top share IPs with koboldthief.com.

Name Servers

Two name servers anahi.ns.cloudflare.com and clark.ns.cloudflare.com handle the delegation for koboldthief.com.

koboldthief.com shares the same name server setup as other domains, for example focusodds.com, rm99c.com, ruletka77uzbekistan.com, hellenicdefence.org and roulette77hongkong.com.

koboldthief.com at least partially shares name servers with other domains, for example ibidoma.top, best100.co.il, nuviaedge.top, carestreamndt.com and abtplanners.com.

These name servers are commonly used with keyla.ns.cloudflare.com and kenneth.ns.cloudflare.com and shane.ns.cloudflare.com.

Host names with six IP numbers:

anahi.ns.cloudflare.com points to 2606:4700:50::a29f:2618, 2803:f800:50::6ca2:c218, 2a06:98c1:50::ac40:2218, 108.162.194.24, 162.159.38.24 and 172.64.34.24.

clark.ns.cloudflare.com points to 2606:4700:58::adf5:3b57, 2803:f800:50::6ca2:c157, 2a06:98c1:50::ac40:2157, 108.162.193.87, 172.64.33.87 and 173.245.59.87.

Mail Servers

The _dc-mx.52d5c559cd27.koboldthief.com mail server handles koboldthief.com.

_dc-mx.52d5c559cd27.koboldthief.com points to a single IP number: 45.79.109.47.

koboldthief.com - robtex.com

koboldthief.com

com

Subdomains

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

Hierarchy

IP Addresses

Name Servers

Mail Servers

`koboldthief.com`

`com`