`suspicious.info`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:8d17^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:46fc^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.70.252^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.141.23^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`maya.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3ac2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maya.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0c2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`maya.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20c2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`maya.ns.cloudflare.com`
		A	108.162.192.194^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maya.ns.cloudflare.com`
		A	172.64.32.194^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maya.ns.cloudflare.com`
		A	173.245.58.194^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maya.ns.cloudflare.com`
NS	`ricardo.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cd3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3d3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ricardo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23d3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ricardo.ns.cloudflare.com`
		A	108.162.195.211^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	162.159.44.211^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
		A	172.64.35.211^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ricardo.ns.cloudflare.com`
MX	`route2.mx.cloudflare.net` ⭐
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
MX	`route1.mx.cloudflare.net`⁽⁴⁹⁾
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route3.mx.cloudflare.net`⁽⁵⁴⁾
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.70.252, 172.67.141.23
		IPv6	2606:4700:3030::ac43:8d17, 2606:4700:3037::6815:46fc
SOA	`maya.ns.cloudflare.com`dns@cloudflare.com serial=2399799332

`info`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.info.afilias-nst.info` ⭐
	NS	`a2.info.afilias-nst.info`
	NS	`b0.info.afilias-nst.org` ⚠️ Not in parent delegation
	NS	`b2.info.afilias-nst.org` ⚠️ Not in parent delegation
	NS	`c0.info.afilias-nst.info`
	NS	`d0.info.afilias-nst.org` ⚠️ Not in parent delegation
	SOA	`a0.info.afilias-nst.info`hostmaster@donuts.email serial=1773555327

Same first word

suspicious.de

suspicious.me

suspicious.org

suspicious.co.uk

suspicious.in

suspicious.co

suspicious.org.uk

suspicious.af

suspicious.info

suspicious.eu

suspicious.com

DNS History

21 records (9 active, 12 former)

○NSbuy.internettraffic.com2015-07-11 → 2016-07-18 · 4 obs

● 2015-07-11 08:18:16
● 2016-07-18 09:03:38
○ 2017-03-27 12:50:22
○ 2026-03-24 06:18:04

○NSdns1.registrar-servers.com2017-03-27 → 2017-03-27 · 4 obs

○ 2016-07-18 09:03:38
● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

○NSdns2.registrar-servers.com2017-03-27 → 2017-03-27 · 4 obs

○ 2016-07-18 09:03:38
● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

●NSmaya.ns.cloudflare.com2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●NSricardo.ns.cloudflare.com2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

○NSsell.internettraffic.com2015-07-11 → 2016-07-18 · 4 obs

● 2015-07-11 08:18:16
● 2016-07-18 09:03:38
○ 2017-03-27 12:50:22
○ 2026-03-24 06:18:04

○MXeforward1.registrar-servers.com2017-03-27 → 2017-03-27 · 3 obs

● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

○MXeforward2.registrar-servers.com2017-03-27 → 2017-03-27 · 3 obs

● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

○MXeforward3.registrar-servers.com2017-03-27 → 2017-03-27 · 3 obs

● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

○MXeforward4.registrar-servers.com2017-03-27 → 2017-03-27 · 3 obs

● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

○MXeforward5.registrar-servers.com2017-03-27 → 2017-03-27 · 3 obs

● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

●MXroute1.mx.cloudflare.net2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●MXroute2.mx.cloudflare.net2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●MXroute3.mx.cloudflare.net2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●A104.21.70.2522026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

○A162.255.119.152017-03-27 → 2017-03-27 · 4 obs

○ 2016-07-18 09:03:38
● 2017-03-27 12:50:22
○ 2026-03-15 00:20:22
○ 2026-03-24 06:18:04

●A172.67.141.232026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●A2606:4700:3030::ac43:8d172026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

●A2606:4700:3037::6815:46fc2026-03-15 → 2026-03-24 · 3 obs

○ 2017-03-27 12:50:22
● 2026-03-15 00:20:22
● 2026-03-24 06:18:04

○A69.172.201.1532016-07-18 → 2016-07-18 · 4 obs

○ 2016-03-25 10:40:54
● 2016-07-18 09:03:38
○ 2017-03-27 12:50:22
○ 2026-03-24 06:18:04

○A69.172.201.2082015-07-11 → 2016-03-25 · 4 obs

● 2015-07-11 08:18:16
● 2016-03-25 10:40:54
○ 2016-07-18 09:03:38
○ 2026-03-24 06:18:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
info	a0.info.afilias-nst.info, a2.info.afilias-nst.info, c0.info.afilias-nst.info	-
suspicious.info	maya.ns.cloudflare.com, ricardo.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.192.194

NS records: maya.ns.cloudflare.com, ricardo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for suspicious.info (unsigned zone)

⏱️ Timing

Total: 780ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.70.252, 172.67.141.23`
AAAA	2	`2606:4700:3030::ac43:8d17, 2606:4700:3037::6815:46fc`
NS	2	`maya.ns.cloudflare.com, ricardo.ns.cloudflare.com`
MX	3	`route2.mx.cloudflare.net (pri: 13), route1.mx.cloudflare.net (pri: 49)...`
TXT	1	`v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`maya.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

Four IP numbers are pointed to by suspicious.info: 2606:4700:3030::ac43:8d17, 2606:4700:3037::6815:46fc, 104.21.70.252 and 172.67.141.23.

other host names including sabseupar.in, etoink.com, pospadan.com, cixiu345.net and puzzledsean.com share IP numbers with suspicious.info.

Name Servers

suspicious.info is delegated to two name servers maya.ns.cloudflare.com and ricardo.ns.cloudflare.com.

suspicious.info shares the same name server setup as other domains, for instance lutvit.de, jackpotdreamspro.com, kulturkokoska.rs, hchan.org and casinoempiresonline.com.

suspicious.info at least partially shares name servers with other domains, for instance afnanparfum.com, 353.tv, eur.su, healthquotes.us and relawannusantara.id.

These name servers are commonly used alongside mia.ns.cloudflare.com and sunny.ns.cloudflare.com.

Host names with six IP numbers:

Host name maya.ns.cloudflare.com points to: 2606:4700:50::adf5:3ac2, 2803:f800:50::6ca2:c0c2, 2a06:98c1:50::ac40:20c2, 108.162.192.194, 172.64.32.194 and 173.245.58.194.

Host name ricardo.ns.cloudflare.com points to: 2606:4700:58::a29f:2cd3, 2803:f800:50::6ca2:c3d3, 2a06:98c1:50::ac40:23d3, 108.162.195.211, 162.159.44.211 and 172.64.35.211.

Mail Servers

suspicious.info is handled by three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

suspicious.info shares some mail servers with other domains, at least partially, for instance revsgaard.dk, spinbara.one, loli.us, ccmco.biz and ratner.com.

Host names with six IP numbers:

Host name route1.mx.cloudflare.net points to: 2606:4700:f5::b, 2606:4700:f5::c, 2606:4700:f5::d, 162.159.205.11, 162.159.205.12 and 162.159.205.13.

Host name route2.mx.cloudflare.net points to: 2606:4700:f5::e, 2606:4700:f5::f, 2606:4700:f5::10, 162.159.205.17, 162.159.205.18 and 162.159.205.19.

Host name route3.mx.cloudflare.net points to: 2606:4700:f5::11, 2606:4700:f5::12, 2606:4700:f5::13, 162.159.205.23, 162.159.205.24 and 162.159.205.25.

suspicious.info - robtex.com

suspicious.info

info

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`suspicious.info`

`info`