`thefraudulentchef.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:4919^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3031::ac43:89f7^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.73.25^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.137.247^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`paityn.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2612^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c212^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`paityn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2212^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`paityn.ns.cloudflare.com`
		A	108.162.194.18^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	162.159.38.18^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	172.64.34.18^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
NS	`patryk.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c7a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`patryk.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c37a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`patryk.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:237a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`patryk.ns.cloudflare.com`
		A	108.162.195.122^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`patryk.ns.cloudflare.com`
		A	162.159.44.122^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`patryk.ns.cloudflare.com`
		A	172.64.35.122^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`patryk.ns.cloudflare.com`
MX	`ghs.google.com` ⭐
		A	2607:f8b0:4004:c23::79^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`yuiadrs-in-f121.1e100.net`
		A	192.178.155.121^{🇺🇸 Google192.178.155.0/24}
			PTR	`yuiadrs-in-f121.1e100.net`
TXT	`google-site-verification=TLoIRCZQ5cOaB5Nwb6lYCG9sRpK5HeUhyLP9MeJ4dpo`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.73.25, 172.67.137.247
		IPv6 hints	2606:4700:3030::6815:4919, 2606:4700:3031::ac43:89f7
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=71, name=cloudflare-ech.com
SOA	`paityn.ns.cloudflare.com`dns@cloudflare.com serial=2403832512

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778399081

rank #385425 globally
rank #164862 in the tld

Same first word

thefraudulentchef.com

DNS History

12 records (7 active, 5 former)

○NSns1.wordpress.com2016-12-18 → 2017-09-12 · 4 obs

● 2016-12-18 14:07:04
● 2017-09-12 01:38:08
○ 2026-04-13 21:00:42
○ 2026-05-10 07:48:16

○NSns2.wordpress.com2016-12-18 → 2017-09-12 · 4 obs

● 2016-12-18 14:07:04
● 2017-09-12 01:38:08
○ 2026-04-13 21:00:42
○ 2026-05-10 07:48:16

○NSns3.wordpress.com2016-12-18 → 2017-09-12 · 4 obs

● 2016-12-18 14:07:04
● 2017-09-12 01:38:08
○ 2026-04-13 21:00:42
○ 2026-05-10 07:48:16

●NSpaityn.ns.cloudflare.com2026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

●NSpatryk.ns.cloudflare.com2026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

●MXghs.google.com2026-04-13 → 2026-05-10 · 2 obs

● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

●A104.21.73.252026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

●A172.67.137.2472026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

○A192.0.78.242016-12-18 → 2017-09-12 · 4 obs

● 2016-12-18 14:07:04
● 2017-09-12 01:38:08
○ 2026-04-13 21:00:42
○ 2026-05-10 07:48:16

○A192.0.78.252016-12-18 → 2017-09-12 · 4 obs

● 2016-12-18 14:07:04
● 2017-09-12 01:38:08
○ 2026-04-13 21:00:42
○ 2026-05-10 07:48:16

●A2606:4700:3030::6815:49192026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

●A2606:4700:3031::ac43:89f72026-04-13 → 2026-05-10 · 3 obs

○ 2017-09-12 01:38:08
● 2026-04-13 21:00:42
● 2026-05-10 07:48:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
thefraudulentchef.com	paityn.ns.cloudflare.com, patryk.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.122

NS records: paityn.ns.cloudflare.com, patryk.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for thefraudulentchef.com (unsigned zone)

⏱️ Timing

Total: 156ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.73.25, 172.67.137.247`
AAAA	2	`2606:4700:3030::6815:4919, 2606:4700:3031::ac43:89f7`
NS	2	`paityn.ns.cloudflare.com, patryk.ns.cloudflare.com`
MX	1	`ghs.google.com (pri: 1200)`
TXT	1	`google-site-verification=TLoIRCZQ5cOaB5N`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`paityn.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (paityn.ns.cloudflare.com, paityn.ns.cloudflare.com, paityn.ns.cloudflare.com...)

Analysis

IP Addresses

thefraudulentchef.com maps to four IP numbers: 2606:4700:3030::6815:4919, 2606:4700:3031::ac43:89f7, 104.21.73.25 and 172.67.137.247.

other host names include deinarchitekt.com, qdlwy.com, thenewscenter.tv, ncbdskj.com and iraniancards.com; they share IP numbers with thefraudulentchef.com.

Name Servers

Two name servers paityn.ns.cloudflare.com and patryk.ns.cloudflare.com handle the delegation for thefraudulentchef.com.

thefraudulentchef.com shares the same name server setup as other domains, for instance vidhyamitra.com, tizemuy.com, zagonel.ind.br, ibprisidoarjo.org and appav.net.

thefraudulentchef.com at least partially shares name servers with other domains, for instance zzbuytopzz.com, centrodiagnostico.es, coolflashgames.org, buffalocreekmarina.com and gunbag.us.com.

These name servers are commonly used with the following: ajay.ns.cloudflare.com, sergi.ns.cloudflare.com, jocelyn.ns.cloudflare.com and addyson.ns.cloudflare.com.

Six IP addresses per host:

paityn.ns.cloudflare.com points to 2606:4700:50::a29f:2612, 2803:f800:50::6ca2:c212, 2a06:98c1:50::ac40:2212, 108.162.194.18, 162.159.38.18 and 172.64.34.18; patryk.ns.cloudflare.com points to 2606:4700:58::a29f:2c7a, 2803:f800:50::6ca2:c37a, 2a06:98c1:50::ac40:237a, 108.162.195.122, 162.159.44.122 and 172.64.35.122

Mail Servers

thefraudulentchef.com is handled by a single mail server, ghs.google.com.

thefraudulentchef.com uses the same mail server setup as other domains, for instance guardianangelassistedliving.com, columbiacitysource.com, prechemtech.com, pmikabbungo.org and perdosri.id.

ghs.google.com resolves to two IPs: 2607:f8b0:4004:c23::79 and 192.178.155.121.

thefraudulentchef.com - robtex.com