`update-noxa.finance`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:568f^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:dc93^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.86.143^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.220.147^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`kip.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b80^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kip.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c180^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kip.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2180^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kip.ns.cloudflare.com`
		A	108.162.193.128^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kip.ns.cloudflare.com`
		A	172.64.33.128^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kip.ns.cloudflare.com`
		A	173.245.59.128^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kip.ns.cloudflare.com`
NS	`meera.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ac3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`meera.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0c3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`meera.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20c3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`meera.ns.cloudflare.com`
		A	108.162.192.195^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`meera.ns.cloudflare.com`
		A	172.64.32.195^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`meera.ns.cloudflare.com`
		A	173.245.58.195^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`meera.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.86.143, 172.67.220.147
		IPv6 hints	2606:4700:3033::6815:568f, 2606:4700:3035::ac43:dc93
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=227, name=cloudflare-ech.com
SOA	`kip.ns.cloudflare.com`dns@cloudflare.com serial=2409533763

`finance`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.finance` ⭐
	NS	`v0n1.nic.finance`
	NS	`v0n2.nic.finance`
	NS	`v0n3.nic.finance`
	NS	`v2n0.nic.finance`
	NS	`v2n1.nic.finance`
	SOA	`v0n0.nic.finance`hostmaster@donuts.email serial=1785330311

⚠️ On DNS blocklist: tif

Same first word

update-noxa.finance

update-noxa.app

DNS History

10 records (6 active, 4 former)

●NSkip.ns.cloudflare.com2026-07-26 → 2026-07-29 · 2 obs

● 2026-07-26 20:32:52
● 2026-07-29 13:15:46

●NSmeera.ns.cloudflare.com2026-07-26 → 2026-07-29 · 2 obs

● 2026-07-26 20:32:52
● 2026-07-29 13:15:46

●A104.21.86.1432026-07-29 → 2026-07-29 · 2 obs

○ 2026-07-26 20:32:52
● 2026-07-29 13:15:46

●A172.67.220.1472026-07-29 → 2026-07-29 · 2 obs

○ 2026-07-26 20:32:52
● 2026-07-29 13:15:46

○A188.114.96.02026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 20:32:52
○ 2026-07-29 13:15:46

○A188.114.97.02026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 20:32:52
○ 2026-07-29 13:15:46

●A2606:4700:3033::6815:568f2026-07-29 → 2026-07-29 · 2 obs

○ 2026-07-26 20:32:52
● 2026-07-29 13:15:46

●A2606:4700:3035::ac43:dc932026-07-29 → 2026-07-29 · 2 obs

○ 2026-07-26 20:32:52
● 2026-07-29 13:15:46

○A2a06:98c1:3120::2026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 20:32:52
○ 2026-07-29 13:15:46

○A2a06:98c1:3121::2026-07-26 → 2026-07-26 · 2 obs

● 2026-07-26 20:32:52
○ 2026-07-29 13:15:46

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
finance	v2n1.nic.finance, v2n0.nic.finance, v0n3.nic.finance, v0n0.nic.finance...	12 records
update-noxa.finance	meera.ns.cloudflare.com, kip.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.33.128

NS records: meera.ns.cloudflare.com, kip.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for update-noxa.finance (unsigned zone)

⏱️ Timing

Total: 456ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.86.143, 172.67.220.147`
AAAA	2	`2606:4700:3035::ac43:dc93, 2606:4700:3033::6815:568f`
NS	2	`kip.ns.cloudflare.com, meera.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`kip.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.finance, v0n1.nic.finance, v0n2.nic.finance...)

Analysis

IP Addresses

update-noxa.finance points to the four IP addresses 104.21.86.143, 172.67.220.147, 2606:4700:3033::6815:568f and 2606:4700:3035::ac43:dc93.

Additional host names — avenuedental.com.au, carhartt-market.com, pragmaticplay.cosmicgame.id and two others — share IP numbers with update-noxa.finance.

Name Servers

update-noxa.finance uses two name servers for its delegation: kip.ns.cloudflare.com and meera.ns.cloudflare.com.

update-noxa.finance shares its name server setup with other domains, including phase2-firelightfi.app, dnsoverride.com, claims-kintara.com and two others.

There is at least partial name server overlap between update-noxa.finance and other domains — meta-support-loginid-et8.pages.dev, amiriconp.com, tirex.media and two more among them.

The name servers ian.ns.cloudflare.com, dawn.ns.cloudflare.com and ryleigh.ns.cloudflare.com are often found in combination with these name servers.

Host names with 6 IP numbers:

Hostname kip.ns.cloudflare.com directs to 108.162.193.128, 172.64.33.128 and 173.245.59.128 along with 3 other IP addresses.

Hostname meera.ns.cloudflare.com directs to 108.162.192.195, 172.64.32.195 and 173.245.58.195 along with 3 other IP addresses.

update-noxa.finance - robtex.com