mail.thequackattack.com - robtex.com

mail.thequackattack.com

DNSSEC⚠️ Not signed
A2606:4700:3035::ac43:add0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:2fe2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.47.226Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.173.208πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.47.226, 172.67.173.208
IPv6 hints2606:4700:3035::ac43:add0, 2606:4700:3037::6815:2fe2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=195, name=cloudflare-ech.com

thequackattack.com

DNSSEC⚠️ Not signed
A2606:4700:3035::ac43:add0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:2fe2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.47.226Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.173.208πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSophelia.ns.cloudflare.com ⭐
NSrustam.ns.cloudflare.com
MX_dc-mx.c82fa74262bc.thequackattack.com ⭐
TXTv=spf1 +a +mx +ip4:192.199.240.234 +ip4:192.199.240.235 include:relay.mailcha...
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.47.226, 172.67.173.208
IPv6 hints2606:4700:3035::ac43:add0, 2606:4700:3037::6815:2fe2
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=195, name=cloudflare-ech.com
SOAophelia.ns.cloudflare.comdns@cloudflare.com serial=2408661250

Same first word

Similar names

DNS History

11 records (4 active, 7 former)

20162017201820192020202120222023202420252026A104.21.47.226172.67.173.2082606:4700:3035::ac43:add02606:4700:3037::6815:2fe2188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3120::42a06:98c1:3121::2a06:98c1:3121::469.195.124.107
●A104.21.47.2262026-07-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2026-03-09 03:42:06
● 2026-07-09 05:09:24
● 2026-07-27 13:14:34
●A172.67.173.2082026-07-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2026-03-09 03:42:06
● 2026-07-09 05:09:24
● 2026-07-27 13:14:34
β—‹A188.114.96.02026-03-09 β†’ 2026-03-09 Β· 4 obs
β—‹ 2016-08-10 16:05:06
● 2026-03-09 03:42:06
β—‹ 2026-07-09 05:09:24
β—‹ 2026-07-27 13:14:34
β—‹A188.114.97.02026-03-09 β†’ 2026-03-09 Β· 4 obs
β—‹ 2016-08-10 16:05:06
● 2026-03-09 03:42:06
β—‹ 2026-07-09 05:09:24
β—‹ 2026-07-27 13:14:34
●A2606:4700:3035::ac43:add02026-07-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2026-03-09 03:42:06
● 2026-07-09 05:09:24
● 2026-07-27 13:14:34
●A2606:4700:3037::6815:2fe22026-07-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2026-03-09 03:42:06
● 2026-07-09 05:09:24
● 2026-07-27 13:14:34
β—‹A2a06:98c1:3120::2026-03-09 β†’ 2026-03-09 Β· 4 obs
β—‹ 2016-08-10 16:05:06
● 2026-03-09 03:42:06
β—‹ 2026-07-09 05:09:24
β—‹ 2026-07-27 13:14:34
β—‹A2a06:98c1:3120::42026-03-09 β†’ 2026-07-27 Β· 2 obs
β—‹ 2026-03-09 03:42:06
β—‹ 2026-07-27 13:14:34
β—‹A2a06:98c1:3121::2026-03-09 β†’ 2026-03-09 Β· 4 obs
β—‹ 2016-08-10 16:05:06
● 2026-03-09 03:42:06
β—‹ 2026-07-09 05:09:24
β—‹ 2026-07-27 13:14:34
β—‹A2a06:98c1:3121::42026-03-09 β†’ 2026-07-27 Β· 2 obs
β—‹ 2026-03-09 03:42:06
β—‹ 2026-07-27 13:14:34
β—‹A69.195.124.1072015-05-21 β†’ 2016-08-10 Β· 4 obs
● 2015-05-21 02:15:14
● 2016-08-10 16:05:06
β—‹ 2026-03-09 03:42:06
β—‹ 2026-07-27 13:14:34

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
come.gtld-servers.net, b.gtld-servers.net, i.gtld-servers.net, l.gtld-servers.net...-
thequackattack.comophelia.ns.cloudflare.com, rustam.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.195.148

NS records: ophelia.ns.cloudflare.com, rustam.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for thequackattack.com (unsigned zone)

⏱️ Timing

Total: 106ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.173.208, 104.21.47.226
AAAA22606:4700:3037::6815:2fe2, 2606:4700:3035::ac43:add0
HTTPS1{"priority":1,"target":".","alpn":["h3",

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ophelia.ns.cloudflare.com, ophelia.ns.cloudflare.com, ophelia.ns.cloudflare.com...)

Analysis

IP Addresses

mail.thequackattack.com points to the four IP addresses 104.21.47.226, 172.67.173.208, 2606:4700:3035::ac43:add0 and 2606:4700:3037::6815:2fe2.

ns.celmec.pl, nextech.com.ar, ezbot.vip and two other host names share IP numbers with mail.thequackattack.com.