`attackscanner.xyz`

DNSSEC	⚠️ Not signed
A	13.248.169.48^{🇺🇸 Amazon13.248.160.0/20}
		PTR	`a904c694c05102f30.awsglobalaccelerator.com`
A	76.223.54.146^{🇺🇸 Amazon76.223.48.0/20}
NS	`ns5.afternic.com` ⭐
		A	2603:5:2134::42^{🇺🇸 GODADDY-DNS2603:5:2130::/44}
			PTR	`ns5.afternic.com`
		A	97.74.99.66^{🇺🇸 GODADDY-DNS97.74.98.0/23}
			PTR	`ns5.afternic.com`
NS	`ns6.afternic.com`
		A	2603:5:2234::42^{🇺🇸 GODADDY-DNS2603:5:2230::/44}
			PTR	`ns6.afternic.com`
		A	173.201.67.66^{🇺🇸 GODADDY-DNS173.201.66.0/23}
			PTR	`ns6.afternic.com`
NS	`verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn` ⚠️ Not in zone NS records
		A	13.248.169.48^{🇺🇸 Amazon13.248.160.0/20}
			PTR	`a904c694c05102f30.awsglobalaccelerator.com`
		A	76.223.54.146^{🇺🇸 Amazon76.223.48.0/20}
			PTR	`a904c694c05102f30.awsglobalaccelerator.com`
TXT	`v=spf1 -all`
SOA	`ns5.afternic.com`dns@jomax.net 2025-09-30 #0

`xyz`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns0.centralnic.net` ⭐
	NS	`generationxyz.nic.xyz`
	NS	`x.nic.xyz`
	NS	`y.nic.xyz`
	NS	`z.nic.xyz`
	SOA	`ns0.centralnic.net`hostmaster@centralnic.net serial=3000855836

⚠️ On DNS blocklist: tif

Same first word

attackscanner.xyz

DNS History

5 records (5 active, 0 former)

●NSns5.afternic.com2026-07-25 → 2026-08-02 · 2 obs

● 2026-07-25 01:36:28
● 2026-08-02 06:45:06

●NSns6.afternic.com2026-07-25 → 2026-08-02 · 2 obs

● 2026-07-25 01:36:28
● 2026-08-02 06:45:06

●NSverification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn2026-07-25 → 2026-08-02 · 2 obs

● 2026-07-25 01:36:28
● 2026-08-02 06:45:06

●A13.248.169.482026-07-25 → 2026-08-02 · 2 obs

● 2026-07-25 01:36:28
● 2026-08-02 06:45:06

●A76.223.54.1462026-07-25 → 2026-08-02 · 2 obs

● 2026-07-25 01:36:28
● 2026-08-02 06:45:06

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
xyz	z.nic.xyz, x.nic.xyz, generationxyz.nic.xyz, y.nic.xyz	-
attackscanner.xyz	ns5.afternic.com, ns6.afternic.com, verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn	-

✅ Authoritative Response

Server:173.201.67.66

NS records: ns5.afternic.com, ns6.afternic.com, verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attackscanner.xyz (unsigned zone)

⏱️ Timing

Total: 3653ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`13.248.169.48, 76.223.54.146`
NS	2	`ns5.afternic.com, ns6.afternic.com`
MX	1	`. (pri: 0)`
TXT	1	`v=spf1 -all`
SOA	1	`ns5.afternic.com dns.jomax.net`

Analysis

IP Addresses

attackscanner.xyz points to the IP addresses 13.248.169.48 and 76.223.54.146

Among the host names that share IP numbers with attackscanner.xyz are load2.evoautomation.com, stim.surgery, shepherdprinting.com and two others.

Name Servers

attackscanner.xyz carries NS records delegating to ns5.afternic.com, ns6.afternic.com and verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn.

At least some of attackscanner.xyz's name servers are shared with other domains, for example sarden4d.xyz, (0x736578)-(0x787878)-asians.xyz, giftaccessory.com and two more.

ns5.afternic.com, ns6.afternic.com and verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn are three hostnames that each resolve to a pair of IP addresses: ns5.afternic.com to 97.74.99.66 and 2603:5:2134::42, ns6.afternic.com to 173.201.67.66 and 2603:5:2234::42, and verification-gakbzzzqmt6gkcplw4efpp.ns101.verify.hn to 13.248.169.48 and 76.223.54.146.

attackscanner.xyz - robtex.com