attack.dnr.cfdata.org - robtex.com

attack.dnr.cfdata.org

DNSSEC⚠️ Not signed
A2606:4700::6812:69e🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700::6812:79e🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.6.158Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.7.158Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
HTTPSHTTP/2 ✓ hints match
IPv4 hints104.18.6.158, 104.18.7.158
IPv6 hints2606:4700::6812:69e, 2606:4700::6812:79e

dnr.cfdata.org

DNSSEC⚠️ Not signed
A2606:4700::6812:69e🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700::6812:79e🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.6.158Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.7.158Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSgordon.ns.cloudflare.com ⭐ ⚠️ Not in parent delegation
NSnina.ns.cloudflare.com ⚠️ Not in parent delegation
HTTPSHTTP/2 ✓ hints match
IPv4 hints104.18.6.158, 104.18.7.158
IPv6 hints2606:4700::6812:69e, 2606:4700::6812:79e
SOAgordon.ns.cloudflare.comdns@cloudflare.com serial=2409687604

Same first word

attack.co
attack.art.br
attack.be
attack.ch
attack.li
attack.org.uk
attack.co.uk
attack.blogspot.com
attack.mobi
attack.neustar
attack.io
attack.org
attack.biz
attack.run
attack.su
attack.hr
attack.media
attack.de
attack.digital
attack.kiev.ua
attack.net
attack.pro
attack.in
attack.dog
attack.com
attack.ie
attack.zone
attack.nl
attack.se
attack.education
attack.co.jp
attack.work
attack.ca
attack.sk
attack.technology
attack.ac
attack.info
attack.ru
attack.com.pl
attack.capital
attack.la
attack.fr
attack.at
attack.com.my
attack.cz

Similar names

kattac.com
katcat.com
ackatt.com
tactak.com
tackat.net
catkat.com

DNS History

4 records (4 active, 0 former)

A104.18.6.158104.18.7.1582606:4700::6812:69e2606:4700::6812:79e
●A104.18.6.1582026-07-18 → 2026-07-19 · 2 obs
● 2026-07-18 06:33:06
● 2026-07-19 14:30:30
●A104.18.7.1582026-07-18 → 2026-07-19 · 2 obs
● 2026-07-18 06:33:06
● 2026-07-19 14:30:30
●A2606:4700::6812:69e2026-07-18 → 2026-07-19 · 2 obs
● 2026-07-18 06:33:06
● 2026-07-19 14:30:30
●A2606:4700::6812:79e2026-07-18 → 2026-07-19 · 2 obs
● 2026-07-18 06:33:06
● 2026-07-19 14:30:30

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
orgb0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org-
cfdata.orgns2.cfdata.org, ns1.cfdata.org4 records

✅ Authoritative Response

Server:162.159.0.6

NS records: ns2.cfdata.org, ns1.cfdata.org

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 334ms | Queries: -

📄 Records

TypeCountSample Data
A2104.18.7.158, 104.18.6.158
AAAA22606:4700::6812:79e, 2606:4700::6812:69e
HTTPS1{"priority":1,"target":".","alpn":["h2"]

📌 Glue Records Collected

Total: 4

In-bailiwick: 4 (ns1.cfdata.org, ns2.cfdata.org, ns1.cfdata.org...)

Analysis

IP Addresses

attack.dnr.cfdata.org points to the four IP addresses 104.18.6.158, 104.18.7.158, 2606:4700::6812:69e and 2606:4700::6812:79e.

tt9909.com, ynet-pic1.yit.co.il.cdn.cloudflare.net, hymansdemo.co.uk and two other host names share IP numbers with attack.dnr.cfdata.org.