`stop-ledger-attack.com`

DNSSEC	⚠️ Not signed
A	37.77.150.237^{🇷🇺 proton6637.77.150.0/24}
NS	`a.dnspod.com` ⭐
		A	43.130.172.75^{🇸🇬 TENCENT-NET-AP-CN43.130.160.0/19 ACEVILLE PTE.LTD. 16 COLLYER QUAY 18-29 INCOME AT RAFFLES}
		A	43.134.249.74^{🇸🇬 TENCENT-NET-AP-CN43.134.224.0/19 ACEVILLE PTE.LTD. 16 COLLYER QUAY 18-29 INCOME AT RAFFLES}
		A	101.227.168.75^{🇨🇳 SHANGHAITELECOM101.227.168.0/23 SHIDC}
		A	117.135.128.175^{🇨🇳 CHINAMOBILE-CN117.135.128.0/24 CMI (Customer Route)}
NS	`b.dnspod.com`
		A	43.161.3.75^{🇮🇳 TENCENT-NET-AP-CN43.161.0.0/18 ACEVILLE PTE.LTD. 16 COLLYER QUAY 18-29 INCOME AT RAFFLES}
		A	163.177.5.79^{🇨🇳 UNICOM-GuangZhou-IDC163.177.5.0/24}
		A	220.196.136.75^{🇨🇳 UNICOM-SHFT-IDC220.196.136.0/24}
NS	`c.dnspod.com`
		A	43.134.249.75^{🇸🇬 TENCENT-NET-AP-CN43.134.224.0/19 ACEVILLE PTE.LTD. 16 COLLYER QUAY 18-29 INCOME AT RAFFLES}
		A	112.80.181.175^{🇨🇳 CHINA169-Backbone112.80.0.0/13 China Unicom CHINA169 Jiangsu Province Network}
		A	125.94.59.175^{🇨🇳 CHINANET-BACKBONE125.88.0.0/13 chinanet Guangdong network}
SOA	`a.dnspod.com`domainadmin@dnspod.com serial=1782998667

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785348912

⚠️ On DNS blocklist: tif

Same first word

stop-ledger-attack.com

DNS History

4 records (4 active, 0 former)

●NSa.dnspod.com2026-07-24 → 2026-07-29 · 2 obs

● 2026-07-24 17:02:52
● 2026-07-29 18:24:36

●NSb.dnspod.com2026-07-24 → 2026-07-29 · 2 obs

● 2026-07-24 17:02:52
● 2026-07-29 18:24:36

●NSc.dnspod.com2026-07-24 → 2026-07-29 · 2 obs

● 2026-07-24 17:02:52
● 2026-07-29 18:24:36

●A37.77.150.2372026-07-24 → 2026-07-29 · 2 obs

● 2026-07-24 17:02:52
● 2026-07-29 18:24:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
stop-ledger-attack.com	a.dnspod.com, b.dnspod.com, c.dnspod.com	10 records

✅ Authoritative Response

Server:101.227.168.75

NS records: a.dnspod.com, b.dnspod.com, c.dnspod.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for stop-ledger-attack.com (unsigned zone)

⏱️ Timing

Total: 3789ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`37.77.150.237`
NS	3	`a.dnspod.com, b.dnspod.com...`
SOA	1	`a.dnspod.com domainadmin.dnspod.com`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (a.dnspod.com, a.dnspod.com, a.dnspod.com...)

Analysis

IP Addresses

stop-ledger-attack.com has exactly one IP address — 37.77.150.237.

elektroniniai.valdzios-vartai.info, supportbitget.app, zcbmsfhjlwryip.com plus two other host names have IP numbers in common with stop-ledger-attack.com.

Name Servers

DNS for stop-ledger-attack.com is handled by three authoritative name servers: a.dnspod.com, b.dnspod.com and c.dnspod.com.

There is at least partial name server overlap between stop-ledger-attack.com and other domains — alphlsad.cfd, kra30--at.cc, xunleixiaoshuo.com and two more among them.

These name servers are routinely deployed together with the name servers f1g1ns1.dnspod.net.

Host names with four IP addresses:

a.dnspod.com resolves to four IP addresses — 43.130.172.75, 43.134.249.74, 101.227.168.75 and 117.135.128.175.

Host names carrying three IP numbers:

b.dnspod.com has IP addresses 43.161.3.75, 163.177.5.79 and 220.196.136.75.

c.dnspod.com has IP addresses 43.134.249.75, 112.80.181.175 and 125.94.59.175.

stop-ledger-attack.com - robtex.com