`underthecovers.us`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::6815:d55^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:84a4^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.13.85^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.132.164^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cory.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b5d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cory.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c15d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cory.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:215d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cory.ns.cloudflare.com`
		A	108.162.193.93^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cory.ns.cloudflare.com`
		A	172.64.33.93^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cory.ns.cloudflare.com`
		A	173.245.59.93^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cory.ns.cloudflare.com`
NS	`etta.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a9c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c09c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`etta.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:209c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`etta.ns.cloudflare.com`
		A	108.162.192.156^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	172.64.32.156^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
		A	173.245.58.156^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`etta.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.13.85, 172.67.132.164
		IPv6 hints	2606:4700:3035::6815:d55, 2606:4700:3037::ac43:84a4
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=129, name=cloudflare-ech.com
SOA	`cory.ns.cloudflare.com`dns@cloudflare.com serial=2410467437

`us`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.cctld.us` ⭐
	NS	`b.cctld.us`
	NS	`f.cctld.us`
	NS	`k.cctld.us`
	NS	`m.cctld.us`
	NS	`n.cctld.us`
	NS	`w.cctld.us`
	NS	`x.cctld.us`
	NS	`y.cctld.us`
	SOA	`a.cctld.us`admin@tldns.godaddy serial=1785557419

Same first word

underthecovers.us

DNS History

15 records (6 active, 9 former)

●NScory.ns.cloudflare.com2026-07-18 → 2026-08-01 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
● 2026-08-01 04:41:10

●NSetta.ns.cloudflare.com2026-07-18 → 2026-08-01 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
● 2026-08-01 04:41:10

○NSns17.domaincontrol.com2015-06-29 → 2015-06-29 · 3 obs

● 2015-06-29 02:40:56
○ 2015-11-02 22:31:36
○ 2026-08-01 04:41:10

○NSns18.domaincontrol.com2015-06-29 → 2015-06-29 · 3 obs

● 2015-06-29 02:40:56
○ 2015-11-02 22:31:36
○ 2026-08-01 04:41:10

○MXmailstore1.secureserver.net2015-06-29 → 2015-06-29 · 3 obs

● 2015-06-29 02:40:56
○ 2015-11-02 22:31:36
○ 2026-08-01 04:41:10

○MXsmtp.secureserver.net2015-06-29 → 2015-06-29 · 3 obs

● 2015-06-29 02:40:56
○ 2015-11-02 22:31:36
○ 2026-08-01 04:41:10

●A104.21.13.852026-08-01 → 2026-08-01 · 2 obs

○ 2026-07-18 07:22:32
● 2026-08-01 04:41:10

●A172.67.132.1642026-08-01 → 2026-08-01 · 2 obs

○ 2026-07-18 07:22:32
● 2026-08-01 04:41:10

○A188.114.96.02026-07-18 → 2026-07-18 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
○ 2026-08-01 04:41:10

○A188.114.97.02026-07-18 → 2026-07-18 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
○ 2026-08-01 04:41:10

○A208.109.181.1382015-06-29 → 2015-06-29 · 3 obs

● 2015-06-29 02:40:56
○ 2015-11-02 22:31:36
○ 2026-08-01 04:41:10

●A2606:4700:3035::6815:d552026-08-01 → 2026-08-01 · 2 obs

○ 2026-07-18 07:22:32
● 2026-08-01 04:41:10

●A2606:4700:3037::ac43:84a42026-08-01 → 2026-08-01 · 2 obs

○ 2026-07-18 07:22:32
● 2026-08-01 04:41:10

○A2a06:98c1:3120::2026-07-18 → 2026-07-18 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
○ 2026-08-01 04:41:10

○A2a06:98c1:3121::2026-07-18 → 2026-07-18 · 3 obs

○ 2015-11-02 22:31:36
● 2026-07-18 07:22:32
○ 2026-08-01 04:41:10

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
us	n.cctld.us, m.cctld.us, b.cctld.us, x.cctld.us...	-
underthecovers.us	cory.ns.cloudflare.com, etta.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.93

NS records: cory.ns.cloudflare.com, etta.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for underthecovers.us (unsigned zone)

⏱️ Timing

Total: 523ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.13.85, 172.67.132.164`
AAAA	2	`2606:4700:3037::ac43:84a4, 2606:4700:3035::6815:d55`
NS	2	`cory.ns.cloudflare.com, etta.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cory.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

underthecovers.us points to the four IP addresses 104.21.13.85, 172.67.132.164, 2606:4700:3035::6815:d55 and 2606:4700:3037::ac43:84a4.

nefyt.com, csendespihenoetterem.hu, cbkdlpcxscbodnrrgxs.pics plus two other host names have IP numbers in common with underthecovers.us.

Name Servers

DNS delegation for underthecovers.us points to two name servers: cory.ns.cloudflare.com and etta.ns.cloudflare.com.

The name server configuration of underthecovers.us is shared with other domains, for instance phenergan.live, mxm.bet, slotranger.me and two others.

At least some of underthecovers.us's name servers are shared with other domains, for example piqisw.com, exopolis.com, interestprint.com and two more.

These name servers tend to be used in conjunction with the name servers raquel.ns.cloudflare.com.

Hosts with 6 IP addresses each:

cory.ns.cloudflare.com has IP addresses 108.162.193.93, 172.64.33.93 and 173.245.59.93, plus 3 other.

etta.ns.cloudflare.com has IP addresses 108.162.192.156, 172.64.32.156 and 173.245.58.156, plus 3 other.

underthecovers.us - robtex.com