`paybytelegram.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:9461^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:5fcb^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.95.203^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.148.97^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`carmelo.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c81^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`carmelo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c381^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`carmelo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2381^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`carmelo.ns.cloudflare.com`
		A	108.162.195.129^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`carmelo.ns.cloudflare.com`
		A	162.159.44.129^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`carmelo.ns.cloudflare.com`
		A	172.64.35.129^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`carmelo.ns.cloudflare.com`
NS	`sofia.ns.cloudflare.com`
		A	2606:4700:50::adf5:3adf^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sofia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0df^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sofia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20df^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sofia.ns.cloudflare.com`
		A	108.162.192.223^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sofia.ns.cloudflare.com`
		A	172.64.32.223^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sofia.ns.cloudflare.com`
		A	173.245.58.223^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sofia.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.95.203, 172.67.148.97
		IPv6 hints	2606:4700:3033::ac43:9461, 2606:4700:3037::6815:5fcb
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=40, name=cloudflare-ech.com
SOA	`carmelo.ns.cloudflare.com`dns@cloudflare.com serial=2401565079

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778811906

⚠️ On DNS blocklist: tif

Same first word

paybytelegram.com

DNS History

6 records (6 active, 0 former)

●NScarmelo.ns.cloudflare.com2026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

●NSsofia.ns.cloudflare.com2026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

●A104.21.95.2032026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

●A172.67.148.972026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

●A2606:4700:3033::ac43:94612026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

●A2606:4700:3037::6815:5fcb2026-05-05 → 2026-05-15 · 2 obs

● 2026-05-05 17:43:50
● 2026-05-15 02:40:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	c.gtld-servers.net, k.gtld-servers.net, m.gtld-servers.net, g.gtld-servers.net...	-
paybytelegram.com	sofia.ns.cloudflare.com, carmelo.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.223

NS records: sofia.ns.cloudflare.com, carmelo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for paybytelegram.com (unsigned zone)

⏱️ Timing

Total: 327ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.95.203, 172.67.148.97`
AAAA	2	`2606:4700:3037::6815:5fcb, 2606:4700:3033::ac43:9461`
NS	2	`carmelo.ns.cloudflare.com, sofia.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`carmelo.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (sofia.ns.cloudflare.com, sofia.ns.cloudflare.com, sofia.ns.cloudflare.com...)

Analysis

IP Addresses

Four IP numbers are pointed to by paybytelegram.com: 2606:4700:3033::ac43:9461, 2606:4700:3037::6815:5fcb, 104.21.95.203 and 172.67.148.97.

other host names including mihudao.com, stratego-be.com, ggrg.com, www.stratego-be.com and zns101.com share IP numbers with paybytelegram.com.

Name Servers

paybytelegram.com is delegated to two name servers carmelo.ns.cloudflare.com and sofia.ns.cloudflare.com.

paybytelegram.com shares the same name server setup as other domains, for instance vector.su, enelco.ru, femas.ru, petropolis-ph.ru and vimbaspb.com.

paybytelegram.com at least partially shares name servers with other domains, for instance tavsancali.net, 666d.uk, ulasreklam.com, stonehardy.co.uk and xmhzp.com.

These name servers are commonly used with keira.ns.cloudflare.com, cortney.ns.cloudflare.com and eric.ns.cloudflare.com.

Host names with six IP numbers:

Host name carmelo.ns.cloudflare.com points to: 2606:4700:58::a29f:2c81, 2803:f800:50::6ca2:c381, 2a06:98c1:50::ac40:2381, 108.162.195.129, 162.159.44.129 and 172.64.35.129.

Host name sofia.ns.cloudflare.com points to: 2606:4700:50::adf5:3adf, 2803:f800:50::6ca2:c0df, 2a06:98c1:50::ac40:20df, 108.162.192.223, 172.64.32.223 and 173.245.58.223.

paybytelegram.com - robtex.com