`nightfallgroup.com`

DNSSEC	⚠️ Not signed
A	2606:4700:7::a29f:862a^{🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
A	2606:4700:7::a29f:872a^{🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
A	162.159.134.42^{Cloudflare162.159.128.0/19 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
A	162.159.135.42^{Cloudflare162.159.128.0/19 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
NS	`addyson.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2644^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`addyson.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c244^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`addyson.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2244^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`addyson.ns.cloudflare.com`
		A	108.162.194.68^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`addyson.ns.cloudflare.com`
		A	162.159.38.68^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`addyson.ns.cloudflare.com`
		A	172.64.34.68^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`addyson.ns.cloudflare.com`
NS	`ray.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b8a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ray.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c18a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ray.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:218a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ray.ns.cloudflare.com`
		A	108.162.193.138^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ray.ns.cloudflare.com`
		A	172.64.33.138^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ray.ns.cloudflare.com`
		A	173.245.59.138^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ray.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4023:c06::1b^{🇺🇸 Google2607:f8b0::/32}
			PTR	`dz-in-f27.1e100.net`
		A	142.250.101.26^{🇺🇸 Google142.250.101.0/24}
			PTR	`dz-in-f26.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2607:f8b0:4023:3003::1b^{🇺🇸 Google2607:f8b0::/32}
			PTR	`yulnkjt-in-f27.1e100.net`
		A	172.253.145.27^{🇺🇸 Google172.253.145.0/24}
			PTR	`yulnkjt-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2607:f8b0:4003:c4a::1a^{🇺🇸 Google2607:f8b0:4003::/48}
			PTR	`yutulth-in-f26.1e100.net`
		A	142.251.96.26^{🇺🇸 Google142.250.0.0/15}
			PTR	`yutulth-in-f26.1e100.net`
TXT	`google-site-verification=45Yi6HjjBh8WRqC4raGN-yBb-jI8DOM8CJnMsG-P2Mw`
TXT	`google-site-verification=JeGfjk57RnNqkFfLaI0YtakaTRVVm2Kfq7jg9MEQdr8`
TXT	`google-site-verification=tQymLyDRinJslE9aUrocjXk4IBSOKYRrTm4tYyaf3tQ`
TXT	`include:46980659.spf04.hubspotemail.net`
TXT	`v=spf1 include:mailgun.org a mx ip4:216.137.189.12 include:_spf.google.com in...`
SOA	`addyson.ns.cloudflare.com`dns@cloudflare.com serial=2399599248

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1774369327

Same first word

nightfallgroup.com

DNS History

16 records (11 active, 5 former)

●NSaddyson.ns.cloudflare.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

○NSns61.domaincontrol.com2015-06-26 → 2017-01-23 · 4 obs

● 2015-06-26 07:18:04
● 2017-01-23 16:06:02
○ 2020-01-11 22:06:08
○ 2026-03-24 16:22:32

○NSns62.domaincontrol.com2015-06-26 → 2017-01-23 · 4 obs

● 2015-06-26 07:18:04
● 2017-01-23 16:06:02
○ 2020-01-11 22:06:08
○ 2026-03-24 16:22:32

●NSray.ns.cloudflare.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●MXalt1.aspmx.l.google.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●MXalt2.aspmx.l.google.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●MXalt3.aspmx.l.google.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●MXalt4.aspmx.l.google.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●MXaspmx.l.google.com2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

○MXmailstore1.secureserver.net2015-06-26 → 2017-01-23 · 4 obs

● 2015-06-26 07:18:04
● 2017-01-23 16:06:02
○ 2020-01-11 22:06:08
○ 2026-03-24 16:22:32

○MXsmtp.secureserver.net2015-06-26 → 2017-01-23 · 4 obs

● 2015-06-26 07:18:04
● 2017-01-23 16:06:02
○ 2020-01-11 22:06:08
○ 2026-03-24 16:22:32

●A162.159.134.422026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●A162.159.135.422026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●A2606:4700:7::a29f:862a2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

●A2606:4700:7::a29f:872a2026-02-19 → 2026-03-24 · 3 obs

○ 2020-01-11 22:06:08
● 2026-02-19 16:07:30
● 2026-03-24 16:22:32

○A50.63.202.542015-06-26 → 2017-01-23 · 4 obs

● 2015-06-26 07:18:04
● 2017-01-23 16:06:02
○ 2020-01-11 22:06:08
○ 2026-03-24 16:22:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
nightfallgroup.com	ray.ns.cloudflare.com, addyson.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.138

NS records: ray.ns.cloudflare.com, addyson.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for nightfallgroup.com (unsigned zone)

⏱️ Timing

Total: 223ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`162.159.135.42, 162.159.134.42`
AAAA	2	`2606:4700:7::a29f:862a, 2606:4700:7::a29f:872a`
NS	2	`addyson.ns.cloudflare.com, ray.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	5	`google-site-verification=45Yi6HjjBh8WRqC, google-site-verification=JeGfjk57RnNqkFf...`
SOA	1	`addyson.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ray.ns.cloudflare.com, ray.ns.cloudflare.com, ray.ns.cloudflare.com...)

Analysis

IP Addresses

nightfallgroup.com maps to four IP numbers: 2606:4700:7::a29f:862a, 2606:4700:7::a29f:872a, 162.159.134.42 and 162.159.135.42.

Other host names, for instance www.scholl.no, medcura.se, beaudoincanada.com, vystahealth.com and www.ginzadining.com share IP numbers with nightfallgroup.com.

Name Servers

Two name servers addyson.ns.cloudflare.com and ray.ns.cloudflare.com are delegated to nightfallgroup.com.

nightfallgroup.com uses the same name server configuration as other domains, such as irancell.ru, hillcountrytaxes.com, cityofcomfort.com, setdns.nl and x2biosystems.com.

nightfallgroup.com at least partially shares name servers with other domains such as colemansfencing.co.nz, mybreastimplantshouston.com, my-spa.rs, saomg.com and bmwtuning.co.

these name servers are commonly used with the name servers osmar.ns.cloudflare.com.

Host names with six IP numbers: Host name addyson.ns.cloudflare.com points to 2606:4700:50::a29f:2644, 2803:f800:50::6ca2:c244, 2a06:98c1:50::ac40:2244, 108.162.194.68, 162.159.38.68 and 172.64.34.68; host name ray.ns.cloudflare.com points to 2606:4700:58::adf5:3b8a, 2803:f800:50::6ca2:c18a, 2a06:98c1:50::ac40:218a, 108.162.193.138, 172.64.33.138 and 173.245.59.138.

Mail Servers

nightfallgroup.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

nightfallgroup.com shares mail servers with other domains at least in part, for instance ns500699.ns500765.ns500693.ns500693.ns500693.ns500699.ns500699.ns500588.ns500693.ns500683.ns500699.ns500699.ns500693.ns500693.ns500110.dtrkdll.com, ns500671.ns500671.ns500754.ns500742.ns500671.ns500704.ns500705.ns500704.ns500688.ns500649.ns500678.ns500666.ns500653.ns500153.tenderladiesbz.com, ns500759.ns500698.ns500758.ns500759.ns500698.ns500698.ns500698.ns500708.ns500708.ns500576.ns500576.ns500698.ns500576.ns500576.tracksymphony.com, ns500731.ns500742.ns500731.ns500671.ns500754.ns500671.ns500671.ns500705.ns500704.ns500671.ns500678.ns500678.lusty(0x736c7574)z.com and simonepagejones.com.

These mail servers are commonly used together with aspmx2.googlemail.com and aspmx3.googlemail.com.

Two IPs per host name:

aspmx.l.google.com points to: 2607:f8b0:4023:c06::1b and 142.250.101.26

alt1.aspmx.l.google.com points to: 2800:3f0:4003:c0f::1b and 108.177.123.27

alt2.aspmx.l.google.com points to: 2a00:1450:400b:c02::1b and 172.253.116.26

alt3.aspmx.l.google.com points to: 2607:f8b0:4023:3003::1b and 172.253.145.27

alt4.aspmx.l.google.com points to: 2607:f8b0:4003:c4a::1a and 142.251.96.26

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)

nightfallgroup.com - robtex.com