`dnbattack.ru`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:53a0^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:b265^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.83.160^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.178.101^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dolly.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a62^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dolly.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c062^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dolly.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2062^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dolly.ns.cloudflare.com`
		A	108.162.192.98^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dolly.ns.cloudflare.com`
		A	172.64.32.98^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dolly.ns.cloudflare.com`
		A	173.245.58.98^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dolly.ns.cloudflare.com`
NS	`fred.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b71^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fred.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c171^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`fred.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2171^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`fred.ns.cloudflare.com`
		A	108.162.193.113^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fred.ns.cloudflare.com`
		A	172.64.33.113^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fred.ns.cloudflare.com`
		A	173.245.59.113^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fred.ns.cloudflare.com`
TXT	`v=spf1 redirect=_spf.yandex.ru`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.83.160, 172.67.178.101
		IPv6 hints	2606:4700:3033::6815:53a0, 2606:4700:3037::ac43:b265
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=198, name=cloudflare-ech.com
SOA	`dolly.ns.cloudflare.com`dns@cloudflare.com serial=2407346175

`ru`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.dns.ripn.net` ⭐
	NS	`b.dns.ripn.net`
	NS	`c.tld-servers.ru`
	NS	`d.dns.ripn.net`
	NS	`e.dns.ripn.net`
	NS	`f.dns.ripn.net`
	SOA	`a.dns.ripn.net`hostmaster@ripn.net serial=4069689

Previously NS for

dnbattack.ru

Same first word

dnbattack.com

dnbattack.ru

DNS History

18 records (6 active, 12 former)

○NSdnbattack.ru2015-07-09 → 2017-08-28 · 7 obs

● 2015-07-09 20:57:36
● 2017-07-13 05:10:40
○ 2017-08-06 11:11:16
● 2017-08-19 20:44:30
● 2017-08-28 23:45:06
○ 2026-03-01 04:25:50
○ 2026-07-21 01:16:18

●NSdolly.ns.cloudflare.com2026-03-01 → 2026-07-21 · 3 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-07-21 01:16:18

○NSexpirepages-kiae-1.nic.ru2017-08-06 → 2017-08-06 · 4 obs

○ 2017-07-13 05:10:40
● 2017-08-06 11:11:16
○ 2017-08-19 20:44:30
○ 2026-07-21 01:16:18

○NSexpirepages-kiae-2.nic.ru2017-08-06 → 2017-08-06 · 4 obs

○ 2017-07-13 05:10:40
● 2017-08-06 11:11:16
○ 2017-08-19 20:44:30
○ 2026-07-21 01:16:18

●NSfred.ns.cloudflare.com2026-03-01 → 2026-07-21 · 3 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-07-21 01:16:18

○NSns1.dnbdrive.ru2015-07-09 → 2017-08-28 · 7 obs

● 2015-07-09 20:57:36
● 2017-07-13 05:10:40
○ 2017-08-06 11:11:16
● 2017-08-19 20:44:30
● 2017-08-28 23:45:06
○ 2026-03-01 04:25:50
○ 2026-07-21 01:16:18

○NSns2.dnbdrive.ru2015-07-09 → 2017-08-28 · 7 obs

● 2015-07-09 20:57:36
● 2017-07-13 05:10:40
○ 2017-08-06 11:11:16
● 2017-08-19 20:44:30
● 2017-08-28 23:45:06
○ 2026-03-01 04:25:50
○ 2026-07-21 01:16:18

○MXmx.yandex.ru2015-07-09 → 2017-08-28 · 7 obs

● 2015-07-09 20:57:36
● 2017-07-13 05:10:40
○ 2017-08-06 11:11:16
● 2017-08-19 20:44:30
● 2017-08-28 23:45:06
○ 2026-03-01 04:25:50
○ 2026-07-21 01:16:18

○MXnomail.nic.ru2017-08-06 → 2017-08-06 · 4 obs

○ 2017-07-13 05:10:40
● 2017-08-06 11:11:16
○ 2017-08-19 20:44:30
○ 2026-07-21 01:16:18

●A104.21.83.1602026-03-01 → 2026-07-21 · 3 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-07-21 01:16:18

○A109.70.26.372017-08-06 → 2017-08-06 · 4 obs

○ 2017-07-13 05:10:40
● 2017-08-06 11:11:16
○ 2017-08-19 20:44:30
○ 2026-07-21 01:16:18

●A172.67.178.1012026-03-01 → 2026-07-21 · 3 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-07-21 01:16:18

○A194.85.61.762017-08-06 → 2017-08-06 · 4 obs

○ 2017-07-13 05:10:40
● 2017-08-06 11:11:16
○ 2017-08-19 20:44:30
○ 2026-07-21 01:16:18

○A2606:4700:3032::ac43:b2652026-03-01 → 2026-06-08 · 5 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-06-08 17:47:30
○ 2026-07-10 01:28:30
○ 2026-07-21 01:16:18

●A2606:4700:3033::6815:53a02026-07-10 → 2026-07-21 · 3 obs

○ 2026-06-08 17:47:30
● 2026-07-10 01:28:30
● 2026-07-21 01:16:18

○A2606:4700:3037::6815:53a02026-03-01 → 2026-06-08 · 5 obs

○ 2017-08-28 23:45:06
● 2026-03-01 04:25:50
● 2026-06-08 17:47:30
○ 2026-07-10 01:28:30
○ 2026-07-21 01:16:18

●A2606:4700:3037::ac43:b2652026-07-10 → 2026-07-21 · 3 obs

○ 2026-06-08 17:47:30
● 2026-07-10 01:28:30
● 2026-07-21 01:16:18

○A77.41.73.432015-07-09 → 2017-08-28 · 7 obs

● 2015-07-09 20:57:36
● 2017-07-13 05:10:40
○ 2017-08-06 11:11:16
● 2017-08-19 20:44:30
● 2017-08-28 23:45:06
○ 2026-03-01 04:25:50
○ 2026-07-21 01:16:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ru	c.tld-servers.ru, d.dns.ripn.net, a.dns.ripn.net, f.dns.ripn.net...	-
dnbattack.ru	fred.ns.cloudflare.com, dolly.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.98

NS records: fred.ns.cloudflare.com, dolly.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for dnbattack.ru (unsigned zone)

⏱️ Timing

Total: 3109ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.178.101, 104.21.83.160`
AAAA	2	`2606:4700:3037::ac43:b265, 2606:4700:3033::6815:53a0`
NS	2	`dolly.ns.cloudflare.com, fred.ns.cloudflare.com`
TXT	1	`v=spf1 redirect=_spf.yandex.ru`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dolly.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

dnbattack.ru directs to four IP numbers, which are 104.21.83.160, 172.67.178.101, 2606:4700:3033::6815:53a0 and 2606:4700:3037::ac43:b265.

Two other host names, along with ns.rjabbate.com, myproject.com.co and secure-sender.shop, also share IP numbers with dnbattack.ru.

Name Servers

The NS records for dnbattack.ru delegate to dolly.ns.cloudflare.com and fred.ns.cloudflare.com.

dnbattack.ru shares its NS records with other domains, for example plaquenilsvo.com, dopesnow.com, icv8888.net and two others.

There is at least partial name server overlap between dnbattack.ru and other domains — fullradiusdance.org, sustainableexistence.co.uk, expect-mor.com and two more among them.

These name servers frequently co-occur with the name servers fatima.ns.cloudflare.com and hank.ns.cloudflare.com.

DNS names with 6 IP addresses:

dolly.ns.cloudflare.com maps to 108.162.192.98, 172.64.32.98, 173.245.58.98 and 3 additional IP addresses.

fred.ns.cloudflare.com maps to 108.162.193.113, 172.64.33.113, 173.245.59.113 and 3 additional IP addresses.

dnbattack.ru - robtex.com

dnbattack.ru

ru

Previously NS for

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

`dnbattack.ru`

`ru`