`leakmafia.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:c5cf^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:44b6^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.68.182^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.197.207^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`annalise.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26ea^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`annalise.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2ea^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`annalise.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22ea^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`annalise.ns.cloudflare.com`
		A	108.162.194.234^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`annalise.ns.cloudflare.com`
		A	162.159.38.234^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`annalise.ns.cloudflare.com`
		A	172.64.34.234^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`annalise.ns.cloudflare.com`
NS	`kayden.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c4a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kayden.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c34a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kayden.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:234a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kayden.ns.cloudflare.com`
		A	108.162.195.74^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kayden.ns.cloudflare.com`
		A	162.159.44.74^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kayden.ns.cloudflare.com`
		A	172.64.35.74^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kayden.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.68.182, 172.67.197.207
		IPv6 hints	2606:4700:3031::ac43:c5cf, 2606:4700:3033::6815:44b6
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=114, name=cloudflare-ech.com
SOA	`annalise.ns.cloudflare.com`dns@cloudflare.com serial=2407997366

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785319477

⚠️ On DNS blocklist: tif

Same first word

leakmafia.com

DNS History

25 records (11 active, 14 former)

●NSannalise.ns.cloudflare.com2026-06-27 → 2026-07-29 · 3 obs

○ 2026-03-24 23:12:46
● 2026-06-27 10:58:10
● 2026-07-29 10:05:14

○NSdns1.registrar-servers.com2026-03-24 → 2026-03-24 · 4 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
○ 2026-06-27 10:58:10
○ 2026-07-29 10:05:14

○NSdns2.registrar-servers.com2026-03-24 → 2026-03-24 · 4 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
○ 2026-06-27 10:58:10
○ 2026-07-29 10:05:14

●NSkayden.ns.cloudflare.com2026-06-27 → 2026-07-29 · 3 obs

○ 2026-03-24 23:12:46
● 2026-06-27 10:58:10
● 2026-07-29 10:05:14

○NSns-us.1and1-dns.com2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

○NSns-us.1and1-dns.de2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

○NSns-us.1and1-dns.org2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

○NSns-us.1and1-dns.us2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

●MXeforward1.registrar-servers.com2026-03-24 → 2026-07-29 · 3 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
● 2026-07-29 10:05:14

●MXeforward2.registrar-servers.com2026-03-24 → 2026-07-29 · 3 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
● 2026-07-29 10:05:14

●MXeforward3.registrar-servers.com2026-03-24 → 2026-07-29 · 3 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
● 2026-07-29 10:05:14

●MXeforward4.registrar-servers.com2026-03-24 → 2026-07-29 · 3 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
● 2026-07-29 10:05:14

●MXeforward5.registrar-servers.com2026-03-24 → 2026-07-29 · 3 obs

○ 2018-08-27 07:10:06
● 2026-03-24 23:12:46
● 2026-07-29 10:05:14

○MXmx00.1and1.com2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

○MXmx01.1and1.com2016-04-17 → 2017-01-14 · 4 obs

● 2016-04-17 14:31:06
● 2017-01-14 09:26:56
○ 2018-08-27 07:10:06
○ 2026-07-29 10:05:14

●A104.21.68.1822026-06-27 → 2026-07-29 · 3 obs

○ 2026-04-21 14:35:04
● 2026-06-27 10:58:10
● 2026-07-29 10:05:14

○A162.255.119.72026-04-21 → 2026-04-21 · 4 obs

○ 2026-03-24 23:12:46
● 2026-04-21 14:35:04
○ 2026-06-27 10:58:10
○ 2026-07-29 10:05:14

●A172.67.197.2072026-06-27 → 2026-07-29 · 3 obs

○ 2026-04-21 14:35:04
● 2026-06-27 10:58:10
● 2026-07-29 10:05:14

○A176.123.3.2462026-03-24 → 2026-03-24 · 4 obs

○ 2017-01-14 09:26:56
● 2026-03-24 23:12:46
○ 2026-04-21 14:35:04
○ 2026-07-29 10:05:14

○A2606:4700:3030::ac43:c5cf2026-06-27 → 2026-06-27 · 4 obs

○ 2026-04-21 14:35:04
● 2026-06-27 10:58:10
○ 2026-07-17 11:58:38
○ 2026-07-29 10:05:14

○A2606:4700:3031::6815:44b62026-06-27 → 2026-06-27 · 4 obs

○ 2026-04-21 14:35:04
● 2026-06-27 10:58:10
○ 2026-07-17 11:58:38
○ 2026-07-29 10:05:14

●A2606:4700:3031::ac43:c5cf2026-07-17 → 2026-07-29 · 3 obs

○ 2026-06-27 10:58:10
● 2026-07-17 11:58:38
● 2026-07-29 10:05:14

●A2606:4700:3033::6815:44b62026-07-17 → 2026-07-29 · 3 obs

○ 2026-06-27 10:58:10
● 2026-07-17 11:58:38
● 2026-07-29 10:05:14

○A2607:f1c0:1000:9094:fce3:699d:bdf:20252016-04-17 → 2016-04-17 · 3 obs

● 2016-04-17 14:31:06
○ 2017-01-14 09:26:56
○ 2026-07-29 10:05:14

○A74.208.168.682016-04-17 → 2016-04-17 · 3 obs

● 2016-04-17 14:31:06
○ 2017-01-14 09:26:56
○ 2026-07-29 10:05:14

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, b.gtld-servers.net, f.gtld-servers.net, h.gtld-servers.net...	-
leakmafia.com	annalise.ns.cloudflare.com, kayden.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.74

NS records: annalise.ns.cloudflare.com, kayden.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for leakmafia.com (unsigned zone)

⏱️ Timing

Total: 457ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.197.207, 104.21.68.182`
AAAA	2	`2606:4700:3031::ac43:c5cf, 2606:4700:3033::6815:44b6`
NS	2	`annalise.ns.cloudflare.com, kayden.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`annalise.ns.cloudflare.com dns.cloudflar`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (annalise.ns.cloudflare.com, annalise.ns.cloudflare.com, annalise.ns.cloudflare.com...)

Analysis

IP Addresses

leakmafia.com directs to four IP numbers, which are 104.21.68.182, 172.67.197.207, 2606:4700:3031::ac43:c5cf and 2606:4700:3033::6815:44b6.

Additional host names — nupoorornaments.com, nickvn.net, cloudencyclopedia.com and two others — share IP numbers with leakmafia.com.

Name Servers

DNS delegation for leakmafia.com points to two name servers: annalise.ns.cloudflare.com and kayden.ns.cloudflare.com.

leakmafia.com shares its name server setup with other domains, including pagapol.ec, quarentholima.org, lomiravalion.org and two others.

At least some of leakmafia.com's name servers are shared with other domains, for example szzgsp.com, telifun.cn, shoppingcenterbusiness.com and two more.

It is common for these name servers to be used in conjunction with the name servers noah.ns.cloudflare.com, seamus.ns.cloudflare.com and ernest.ns.cloudflare.com.

Host names with 6 IP numbers:

annalise.ns.cloudflare.com has IP addresses 108.162.194.234, 162.159.38.234 and 172.64.34.234, plus 3 other.

kayden.ns.cloudflare.com has IP addresses 108.162.195.74, 162.159.44.74 and 172.64.35.74, plus 3 other.

Mail Servers

Five mail servers handle leakmafia.com: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

leakmafia.com shares mail servers — at least in part — with other domains, including hallmarkstories.com, on1.online, alejandromena.com and two others.

These mail servers are frequently paired with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names pointing to a single IP address:

eforward1.registrar-servers.com directs to 162.255.118.51.

eforward2.registrar-servers.com directs to 162.255.118.52.

eforward3.registrar-servers.com directs to 162.255.118.51.

eforward4.registrar-servers.com directs to 162.255.118.52.

eforward5.registrar-servers.com directs to 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com are host names that all point to 162.255.118.51.

Host names pointing to 162.255.118.52 IP addresses: eforward2.registrar-servers.com and eforward4.registrar-servers.com.