`replicaraybans.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:788^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:87f6^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.7.136^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.135.246^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`peyton.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bdd^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`peyton.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1dd^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`peyton.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21dd^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`peyton.ns.cloudflare.com`
		A	108.162.193.221^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`peyton.ns.cloudflare.com`
		A	172.64.33.221^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`peyton.ns.cloudflare.com`
		A	173.245.59.221^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`peyton.ns.cloudflare.com`
NS	`wally.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aef^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0ef^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`wally.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20ef^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`wally.ns.cloudflare.com`
		A	108.162.192.239^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	172.64.32.239^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	173.245.58.239^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.7.136, 172.67.135.246
		IPv6 hints	2606:4700:3034::6815:788, 2606:4700:3035::ac43:87f6
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=121, name=cloudflare-ech.com
SOA	`peyton.ns.cloudflare.com`dns@cloudflare.com serial=2399716642

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775488737

WOT: SUSPICIOUS (1/100)

Same first word

replicaraybans.com

DNS History

15 records (6 active, 9 former)

○NSmydnsw.earth.orderbox-dns.com2017-03-28 → 2017-03-28 · 4 obs

○ 2016-08-08 07:33:10
● 2017-03-28 19:29:02
○ 2026-03-29 00:37:22
○ 2026-04-06 15:30:58

○NSmydnsw.mars.orderbox-dns.com2017-03-28 → 2017-03-28 · 4 obs

○ 2016-08-08 07:33:10
● 2017-03-28 19:29:02
○ 2026-03-29 00:37:22
○ 2026-04-06 15:30:58

○NSmydnsw.mercury.orderbox-dns.com2017-03-28 → 2017-03-28 · 4 obs

○ 2016-08-08 07:33:10
● 2017-03-28 19:29:02
○ 2026-03-29 00:37:22
○ 2026-04-06 15:30:58

○NSmydnsw.venus.orderbox-dns.com2017-03-28 → 2017-03-28 · 4 obs

○ 2016-08-08 07:33:10
● 2017-03-28 19:29:02
○ 2026-03-29 00:37:22
○ 2026-04-06 15:30:58

○NSns1.sedoparking.com2015-08-23 → 2016-03-15 · 4 obs

● 2015-08-23 11:10:40
● 2016-03-15 05:29:48
○ 2016-08-08 07:33:10
○ 2026-04-06 15:30:58

○NSns2.sedoparking.com2015-08-23 → 2016-03-15 · 4 obs

● 2015-08-23 11:10:40
● 2016-03-15 05:29:48
○ 2016-08-08 07:33:10
○ 2026-04-06 15:30:58

●NSpeyton.ns.cloudflare.com2026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

●NSwally.ns.cloudflare.com2026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

○MXmail.nickstel.com2015-08-23 → 2016-03-15 · 4 obs

● 2015-08-23 11:10:40
● 2016-03-15 05:29:48
○ 2016-08-08 07:33:10
○ 2026-04-06 15:30:58

●A104.21.7.1362026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

●A172.67.135.2462026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

●A2606:4700:3034::6815:7882026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

●A2606:4700:3035::ac43:87f62026-03-29 → 2026-04-06 · 3 obs

○ 2017-03-28 19:29:02
● 2026-03-29 00:37:22
● 2026-04-06 15:30:58

○A50.93.207.1732017-03-28 → 2017-03-28 · 4 obs

○ 2016-08-08 07:33:10
● 2017-03-28 19:29:02
○ 2026-03-29 00:37:22
○ 2026-04-06 15:30:58

○A72.52.4.1192015-08-23 → 2016-03-15 · 4 obs

● 2015-08-23 11:10:40
● 2016-03-15 05:29:48
○ 2016-08-08 07:33:10
○ 2026-04-06 15:30:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net...	-
replicaraybans.com	wally.ns.cloudflare.com, peyton.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.221

NS records: wally.ns.cloudflare.com, peyton.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for replicaraybans.com (unsigned zone)

⏱️ Timing

Total: 200ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.7.136, 172.67.135.246`
AAAA	2	`2606:4700:3034::6815:788, 2606:4700:3035::ac43:87f6`
NS	2	`peyton.ns.cloudflare.com, wally.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`peyton.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (wally.ns.cloudflare.com, wally.ns.cloudflare.com, wally.ns.cloudflare.com...)

Analysis

IP Addresses

replicaraybans.com resolves to four IP numbers: 2606:4700:3034::6815:788, 2606:4700:3035::ac43:87f6, 104.21.7.136 and 172.67.135.246.

other host names for instance zenit-hmetricslabs.sbs, cradlerock.com, nc08600.bloggerbags.com, infoglo.com and l7een.com share IP numbers with replicaraybans.com.

Name Servers

replicaraybans.com is delegated to two name servers: peyton.ns.cloudflare.com and wally.ns.cloudflare.com.

replicaraybans.com shares the same name server setup as other domains, for example mirocode.com, rededompedro.com, tomforddupes.com, navega-aqui.pt and babil.dev.

replicaraybans.com at least partially shares name servers with other domains, for instance (0x6d696c66)toon.pro, 4915511.cc, cricutsearch.com, mprmedia.com.au and hestianet.nl.

These name servers are commonly used with olivia.ns.cloudflare.com, clint.ns.cloudflare.com and thomas.ns.cloudflare.com.

Host names with six IP numbers:

peyton.ns.cloudflare.com points to: 2606:4700:58::adf5:3bdd, 2803:f800:50::6ca2:c1dd, 2a06:98c1:50::ac40:21dd, 108.162.193.221, 172.64.33.221 and 173.245.59.221; wally.ns.cloudflare.com points to: 2606:4700:50::adf5:3aef, 2803:f800:50::6ca2:c0ef, 2a06:98c1:50::ac40:20ef, 108.162.192.239, 172.64.32.239 and 173.245.58.239.

replicaraybans.com - robtex.com