`api.threatswitch.com`

DNSSEC	⚠️ Not signed
A	2606:4700::6812:14dd^{🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700::6812:15dd^{🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.18.20.221^{Cloudflare104.18.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.18.21.221^{Cloudflare104.18.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/2 ✓ hints match
		IPv4 hints	104.18.20.221, 104.18.21.221
		IPv6 hints	2606:4700::6812:14dd, 2606:4700::6812:15dd

`threatswitch.com`

	DNSSEC	⚠️ Not signed
	A	75.2.70.75^{🇺🇸 Amazon75.2.64.0/20}
	A	99.83.190.102^{🇺🇸 Amazon99.83.176.0/20}
	NS	`glen.ns.cloudflare.com` ⭐
	NS	`mary.ns.cloudflare.com`
	MX	`aspmx.l.google.com` ⭐
	MX	`alt1.aspmx.l.google.com`⁽²⁰⁾
	MX	`alt2.aspmx.l.google.com`⁽²⁰⁾
	MX	`aspmx2.googlemail.com`⁽³⁰⁾
	MX	`aspmx3.googlemail.com`⁽³⁰⁾
	MX	`aspmx4.googlemail.com`⁽³⁰⁾
	MX	`aspmx5.googlemail.com`⁽³⁰⁾
	TXT	`3D4C252AC7`
	TXT	`MS=ms64182863`
	TXT	`atlassian-domain-verification=2bXvYfJOgOJLcNDRm8lhI1b49bRjdmwml/ZZHoPBFaaH2vO...`
	TXT	`atlassian-domain-verification=851rcdhjdON12W2sFEQaDlA5VF0tVAi1y7k/5MUcYkqqCE0...`
	TXT	`google-site-verification=wVlKQET7sPR7xDqEHcY4FmNWXo6v8DIVdF3mySrBRH0`
	TXT	`miro-verification=b939303578c93653669bf1907b5ecc605e5343b8`
	TXT	`proxy-ssl.webflow.com`
	TXT	`v=spf1 include:spf.mandrillapp.com include:_spf.google.com ~all`
	SOA	`glen.ns.cloudflare.com`dns@cloudflare.com serial=2407651034

Same first word

api.gy

api.limited

api.si

api.my

api.re.kr

api.click

api.tf

api.taxi

api.net

api.glitch.me

api.anz

api.in.ua

api.hk

api.ph

api.school

api.ie

api.ms.gov.br

api.design

api.solutions

api.cc

api.vacations

api.ah.cn

api.co.ke

api.be

api.gov.uk

api.tn

api.lecco.it

api.com.lb

api.co.il

api.in.th

api.edu.au

api.co.za

api.tc

api.tr

api.consulting

api.ag

api.beer

api.makeup

api.lk

api.fitness

api.tj

api.trycloudflare.com

api.com.br

api.co.rs

api.io.in

api.li

api.az

api.me.in

api.sa.gov.au

api.io

api.blue

api.mn

api.lv

api.nab

api.kinghost.net

api.co.ir

api.to

api.kitchen

api.theater

api.tl

api.woodside

api.ba

api.chat

api.nu

api.or.at

api.kz

api.box

api.com.tn

api.com.tw

api.services

api.adv.br

api.torino.it

api.email

api.autos

api.ro

api.support

api.org.kw

api.ad

api.org.br

api.cash

api.co.kr

api.space

api.vision

api.cool

api.im

api.education

api.market

api.bg

api.ci

api.ws

api.edu.co

api.hb.cn

api.net.pl

api.loan

api.today

api.dj

api.sc

api.biz.tr

api.co.nz

api.ht

Similar names

aip.net

iap.co

api.gov.ph

api.canva-apps.cn

api.rj.gov.br

api.bauhaus

api.sh

ipa.ac.tz

iap.at

pai.be

api.gov.pk

pia.pr.gov.br

pia.school

pai.org.nz

pai.in.th

api.es.gov.br

iap.foundation

pia.ac.kr

pia.co.jp

api.gmbh

api.gold

ipa.dk

api.com.ve

ipa.store

aip.ch

api.uk

api.ca

ipa.sk

pia.net

api.auto

api.city

iap.ac.cn

api.management

api.games

pia.ru

pai.works

iap.kz

aip.com.bn

pia.kz

ipa.fi

ipa.co.uk

pai.video

pai.cx

aip.li

iap.co.uk

aip.me

iap.com.hk

pai.ch

iap.pl

aip.az

pai.lu

aip.ee

aip.vn

ipa.si

pai.co.il

aip.media

pai.es

aip.pl

iap.fr

aip.com.pe

aip.com.ph

pia.holdings

ipa.church

ipa.net.cn

iap.re

iap.kharkov.ua

pia.org.uk

pia.biz

ipa.com.my

DNS History

10 records (4 active, 6 former)

●A104.18.20.2212026-04-06 → 2026-07-07 · 3 obs

○ 2026-03-20 05:20:48
● 2026-04-06 15:14:24
● 2026-07-07 16:35:12

●A104.18.21.2212026-04-06 → 2026-07-07 · 3 obs

○ 2026-03-20 05:20:48
● 2026-04-06 15:14:24
● 2026-07-07 16:35:12

○A104.26.6.332026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

○A104.26.7.332026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

○A172.67.69.1002026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

●A2606:4700::6812:14dd2026-04-06 → 2026-07-07 · 3 obs

○ 2026-03-20 05:20:48
● 2026-04-06 15:14:24
● 2026-07-07 16:35:12

●A2606:4700::6812:15dd2026-04-06 → 2026-07-07 · 3 obs

○ 2026-03-20 05:20:48
● 2026-04-06 15:14:24
● 2026-07-07 16:35:12

○A2606:4700:20::681a:6212026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

○A2606:4700:20::681a:7212026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

○A2606:4700:20::ac43:45642026-03-20 → 2026-03-20 · 3 obs

● 2026-03-20 05:20:48
○ 2026-04-06 15:14:24
○ 2026-07-07 16:35:12

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	e.gtld-servers.net, a.gtld-servers.net, f.gtld-servers.net, k.gtld-servers.net...	-
threatswitch.com	mary.ns.cloudflare.com, glen.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.134

NS records: mary.ns.cloudflare.com, glen.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for threatswitch.com (unsigned zone)

⏱️ Timing

Total: 229ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.18.20.221, 104.18.21.221`
AAAA	2	`2606:4700::6812:15dd, 2606:4700::6812:14dd`
HTTPS	1	`{"priority":1,"target":".","alpn":["h2"]`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (mary.ns.cloudflare.com, mary.ns.cloudflare.com, mary.ns.cloudflare.com...)

Analysis

IP Addresses

api.threatswitch.com has four IP addresses: 104.18.20.221, 104.18.21.221, 2606:4700::6812:14dd and 2606:4700::6812:15dd.

dandb.se, www.drumlessons.com, workerscompadvisors.com plus two other host names have IP numbers in common with api.threatswitch.com.

api.threatswitch.com - robtex.com