`loanoffer.ru`

DNSSEC	⚠️ Not signed
A	2606:4700:3037::6815:600a^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:9620^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.96.10^{Cloudflare104.21.96.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.150.32^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`ryleigh.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26c6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ryleigh.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2c6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ryleigh.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22c6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ryleigh.ns.cloudflare.com`
		A	108.162.194.198^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ryleigh.ns.cloudflare.com`
		A	162.159.38.198^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ryleigh.ns.cloudflare.com`
		A	172.64.34.198^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ryleigh.ns.cloudflare.com`
NS	`vasilii.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c1a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c31a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`vasilii.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:231a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`vasilii.ns.cloudflare.com`
		A	108.162.195.26^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	162.159.44.26^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	172.64.35.26^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.96.10, 172.67.150.32
		IPv6 hints	2606:4700:3037::6815:600a, 2606:4700:3037::ac43:9620
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=14, name=cloudflare-ech.com
SOA	`ryleigh.ns.cloudflare.com`dns@cloudflare.com serial=2399112139

`ru`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.dns.ripn.net` ⭐
	NS	`b.dns.ripn.net`
	NS	`d.dns.ripn.net`
	NS	`e.dns.ripn.net`
	NS	`f.dns.ripn.net`
	SOA	`a.dns.ripn.net`hostmaster@ripn.net serial=4068811

Same first word

loanoffer.cc

loanoffer.ru

loanoffer.com

DNS History

15 records (6 active, 9 former)

○NSns1.afraid.org2017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

○NSns1.r01.ru2015-11-13 → 2016-06-22 · 4 obs

● 2015-11-13 14:10:58
● 2016-06-22 20:42:04
○ 2017-04-10 05:48:12
○ 2026-05-09 13:25:38

○NSns2.afraid.org2017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

○NSns2.r01.ru2015-11-13 → 2016-06-22 · 4 obs

● 2015-11-13 14:10:58
● 2016-06-22 20:42:04
○ 2017-04-10 05:48:12
○ 2026-05-09 13:25:38

○NSns3.afraid.org2017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

○NSns4.afraid.org2017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

●NSryleigh.ns.cloudflare.com2026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

●NSvasilii.ns.cloudflare.com2026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

●A104.21.96.102026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

●A172.67.150.322026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

●A2606:4700:3037::6815:600a2026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

●A2606:4700:3037::ac43:96202026-04-10 → 2026-05-09 · 3 obs

○ 2017-04-10 05:48:12
● 2026-04-10 05:12:40
● 2026-05-09 13:25:38

○A69.197.18.1832017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

○A70.39.97.2302017-04-10 → 2017-04-10 · 4 obs

○ 2016-06-22 20:42:04
● 2017-04-10 05:48:12
○ 2026-04-10 05:12:40
○ 2026-05-09 13:25:38

○A95.213.143.892015-11-13 → 2016-06-22 · 4 obs

● 2015-11-13 14:10:58
● 2016-06-22 20:42:04
○ 2017-04-10 05:48:12
○ 2026-05-09 13:25:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ru	a.dns.ripn.net, d.dns.ripn.net, b.dns.ripn.net, f.dns.ripn.net...	-
loanoffer.ru	vasilii.ns.cloudflare.com, ryleigh.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.26

NS records: vasilii.ns.cloudflare.com, ryleigh.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for loanoffer.ru (unsigned zone)

⏱️ Timing

Total: 518ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.96.10, 172.67.150.32`
AAAA	2	`2606:4700:3037::6815:600a, 2606:4700:3037::ac43:9620`
NS	2	`ryleigh.ns.cloudflare.com, vasilii.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`ryleigh.ns.cloudflare.com dns.cloudflare`

Analysis

IP Addresses

loanoffer.ru resolves to four IP numbers: 2606:4700:3037::6815:600a, 2606:4700:3037::ac43:9620, 104.21.96.10 and 172.67.150.32.

Other host names such as zypers.com, giants.co.nz, ykww.com.cn, jcpxoffice.com and www.bdmbetonline.com share IPs with loanoffer.ru.

Name Servers

loanoffer.ru is delegated to two name servers: ryleigh.ns.cloudflare.com and vasilii.ns.cloudflare.com.

loanoffer.ru shares the same name server setup as natchelblues.org, zozh-lekar.ru, vulkan777world.ru, enterthepixel.co.uk and hovik.org.

loanoffer.ru at least partially shares name servers with other domains, for instance solarissolutions-4.sbs, omnixstrategy.sbs, technoflowone.biz, brig.net and drugtheapp.ru.

These name servers are commonly used together with meiling.ns.cloudflare.com, pam.ns.cloudflare.com and viddy.ns.cloudflare.com.

Host names with six IP numbers:

ryleigh.ns.cloudflare.com points to 2606:4700:50::a29f:26c6, 2803:f800:50::6ca2:c2c6, 2a06:98c1:50::ac40:22c6, 108.162.194.198, 162.159.38.198 and 172.64.34.198.

vasilii.ns.cloudflare.com points to 2606:4700:58::a29f:2c1a, 2803:f800:50::6ca2:c31a, 2a06:98c1:50::ac40:231a, 108.162.195.26, 162.159.44.26 and 172.64.35.26.

loanoffer.ru - robtex.com

loanoffer.ru

ru

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

`loanoffer.ru`

`ru`