`letterfriends.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:814^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:9cb4^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.8.20^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.156.180^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`thomas.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bee^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`thomas.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ee^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`thomas.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ee^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`thomas.ns.cloudflare.com`
		A	108.162.193.238^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`thomas.ns.cloudflare.com`
		A	172.64.33.238^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`thomas.ns.cloudflare.com`
		A	173.245.59.238^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`thomas.ns.cloudflare.com`
NS	`ulla.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ulla.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ulla.ns.cloudflare.com`
		A	108.162.192.233^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	172.64.32.233^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	173.245.58.233^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.8.20, 172.67.156.180
		IPv6 hints	2606:4700:3034::6815:814, 2606:4700:3034::ac43:9cb4
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=133, name=cloudflare-ech.com
SOA	`thomas.ns.cloudflare.com`dns@cloudflare.com serial=2409978199

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784964432

⚠️ On DNS blocklist: tif

Same first word

letterfriends.com

letterfriends.de

DNS History

23 records (6 active, 17 former)

○NSns.deutschepost.de2015-08-16 → 2020-02-06 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2020-02-06 14:34:56
○ 2026-05-06 12:37:48
○ 2026-07-25 07:48:06

○NSns01.brandshelter.com2020-02-06 → 2020-02-06 · 4 obs

○ 2017-01-17 13:57:20
● 2020-02-06 14:34:56
○ 2026-05-06 12:37:48
○ 2026-07-25 07:48:06

○NSns02.brandshelter.net2020-02-06 → 2020-02-06 · 4 obs

○ 2017-01-17 13:57:20
● 2020-02-06 14:34:56
○ 2026-05-06 12:37:48
○ 2026-07-25 07:48:06

○NSns1.deutschepost.de2017-01-17 → 2017-01-17 · 4 obs

○ 2016-04-05 22:51:00
● 2017-01-17 13:57:20
○ 2020-02-06 14:34:56
○ 2026-07-25 07:48:06

○NSns1.markmonitor.com2015-08-16 → 2016-04-05 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2016-04-05 22:51:00
○ 2017-01-17 13:57:20
○ 2026-07-25 07:48:06

○NSns2.deutschepost.de2017-01-17 → 2017-01-17 · 4 obs

○ 2016-04-05 22:51:00
● 2017-01-17 13:57:20
○ 2020-02-06 14:34:56
○ 2026-07-25 07:48:06

○NSns3.deutschepost.de2017-01-17 → 2017-01-17 · 4 obs

○ 2016-04-05 22:51:00
● 2017-01-17 13:57:20
○ 2020-02-06 14:34:56
○ 2026-07-25 07:48:06

○NSns3.markmonitor.com2015-08-16 → 2016-04-05 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2016-04-05 22:51:00
○ 2017-01-17 13:57:20
○ 2026-07-25 07:48:06

○NSns5.markmonitor.com2015-08-16 → 2016-04-05 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2016-04-05 22:51:00
○ 2017-01-17 13:57:20
○ 2026-07-25 07:48:06

○NSppd00021.deutschepost.de2015-08-16 → 2020-02-06 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2020-02-06 14:34:56
○ 2026-05-06 12:37:48
○ 2026-07-25 07:48:06

●NSthomas.ns.cloudflare.com2026-05-06 → 2026-07-25 · 3 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-07-25 07:48:06

●NSulla.ns.cloudflare.com2026-05-06 → 2026-07-25 · 3 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-07-25 07:48:06

●A104.21.8.202026-05-06 → 2026-07-25 · 6 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-06-14 21:45:20
○ 2026-06-15 04:22:48
● 2026-07-25 07:48:02
● 2026-07-25 07:48:06

○A160.58.148.12015-08-16 → 2020-02-06 · 5 obs

○ 2008-03-18 09:00:40
● 2015-08-16 18:40:26
● 2020-02-06 14:34:56
○ 2026-05-06 12:37:48
○ 2026-07-25 07:48:06

●A172.67.156.1802026-05-06 → 2026-07-25 · 6 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-06-14 21:45:20
○ 2026-06-15 04:22:48
● 2026-07-25 07:48:02
● 2026-07-25 07:48:06

○A188.114.96.02026-06-15 → 2026-06-15 · 4 obs

○ 2026-06-14 21:45:20
● 2026-06-15 04:22:48
○ 2026-07-25 07:48:02
○ 2026-07-25 07:48:06

○A188.114.97.02026-06-15 → 2026-06-15 · 4 obs

○ 2026-06-14 21:45:20
● 2026-06-15 04:22:48
○ 2026-07-25 07:48:02
○ 2026-07-25 07:48:06

●A2606:4700:3034::6815:8142026-07-25 → 2026-07-25 · 3 obs

○ 2026-06-15 04:22:48
● 2026-07-25 07:48:02
● 2026-07-25 07:48:06

●A2606:4700:3034::ac43:9cb42026-07-25 → 2026-07-25 · 3 obs

○ 2026-06-15 04:22:48
● 2026-07-25 07:48:02
● 2026-07-25 07:48:06

○A2606:4700:3036::ac43:9cb42026-05-06 → 2026-06-14 · 5 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-06-14 21:45:20
○ 2026-06-15 04:22:48
○ 2026-07-25 07:48:06

○A2606:4700:3037::6815:8142026-05-06 → 2026-06-14 · 5 obs

○ 2020-02-06 14:34:56
● 2026-05-06 12:37:48
● 2026-06-14 21:45:20
○ 2026-06-15 04:22:48
○ 2026-07-25 07:48:06

○A2a06:98c1:3120::2026-06-15 → 2026-06-15 · 4 obs

○ 2026-06-14 21:45:20
● 2026-06-15 04:22:48
○ 2026-07-25 07:48:02
○ 2026-07-25 07:48:06

○A2a06:98c1:3121::2026-06-15 → 2026-06-15 · 4 obs

○ 2026-06-14 21:45:20
● 2026-06-15 04:22:48
○ 2026-07-25 07:48:02
○ 2026-07-25 07:48:06

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	k.gtld-servers.net, g.gtld-servers.net, a.gtld-servers.net, b.gtld-servers.net...	-
letterfriends.com	ulla.ns.cloudflare.com, thomas.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.233

NS records: ulla.ns.cloudflare.com, thomas.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for letterfriends.com (unsigned zone)

⏱️ Timing

Total: 488ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.156.180, 104.21.8.20`
AAAA	2	`2606:4700:3034::ac43:9cb4, 2606:4700:3034::6815:814`
NS	2	`thomas.ns.cloudflare.com, ulla.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`thomas.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ulla.ns.cloudflare.com, ulla.ns.cloudflare.com, ulla.ns.cloudflare.com...)

Analysis

IP Addresses

letterfriends.com points to the four IP addresses 104.21.8.20, 172.67.156.180, 2606:4700:3034::6815:814 and 2606:4700:3034::ac43:9cb4.

www.ads4me.com, etaas.com.tr, www.russedina.ru and two other host names share IP numbers with letterfriends.com.

Name Servers

Two name servers handle the delegation for letterfriends.com: thomas.ns.cloudflare.com and ulla.ns.cloudflare.com.

letterfriends.com uses the same name servers as several other domains — among them alder.com, denver2008.com, kultcha.org and two more.

There is at least partial name server overlap between letterfriends.com and other domains — data-singapore.id, checkfox.de, st923.com and two more among them.

The name servers clay.ns.cloudflare.com, wally.ns.cloudflare.com and adrian.ns.cloudflare.com are often found in combination with these name servers.

Hostnames that resolve to 6 IP addresses:

thomas.ns.cloudflare.com resolves to 108.162.193.238, 172.64.33.238 and 173.245.59.238 among others, with 3 other IP addresses in total.

ulla.ns.cloudflare.com resolves to 108.162.192.233, 172.64.32.233 and 173.245.58.233 among others, with 3 other IP addresses in total.

letterfriends.com - robtex.com