Advertisement
y0urn3w0wn3r

ISIS SITE WHOIS *UPDATED*FEB 12

Jan 11th, 2018
1,305
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.96 KB | None | 0 0
  1. ___ ______ _________ ___ _______
  2. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  3. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  4. |_|_\___/ \_/_|___/_|_\|___/___/___/
  5. / __| __/ __|
  6. \__ \ _| (__
  7. |___/___\___|
  8.  
  9. ____________________________________________
  10. | Auto Footprint Tool |
  11. | By: Y0urN3w0wn3r |
  12. | www.ReversedSec.com |
  13. |____________________________________________|
  14. ____________________________________
  15. | NSHELP RESULTS FOR |
  16. | alemarah-english.com |
  17. |____________________________________|
  18. Server: 8.8.8.8
  19. Address: 8.8.8.8#53
  20.  
  21. Non-authoritative answer:
  22. Name: alemarah-english.com
  23. Address: 104.28.1.24
  24. Name: alemarah-english.com
  25. Address: 104.28.0.24
  26.  
  27. Server: 8.8.8.8
  28. Address: 8.8.8.8#53
  29.  
  30. Non-authoritative answer:
  31. *** Can't find alemarah-english.com: No answer
  32.  
  33. Authoritative answers can be found from:
  34. alemarah-english.com
  35. origin = lloyd.ns.cloudflare.com
  36. mail addr = dns.cloudflare.com
  37. serial = 2026831579
  38. refresh = 10000
  39. retry = 2400
  40. expire = 604800
  41. minimum = 3600
  42.  
  43. Server: 8.8.8.8
  44. Address: 8.8.8.8#53
  45.  
  46. Non-authoritative answer:
  47. alemarah-english.com
  48. origin = lloyd.ns.cloudflare.com
  49. mail addr = dns.cloudflare.com
  50. serial = 2026831579
  51. refresh = 10000
  52. retry = 2400
  53. expire = 604800
  54. minimum = 3600
  55.  
  56. Authoritative answers can be found from:
  57. alemarah-english.com nameserver = zara.ns.cloudflare.com.
  58. alemarah-english.com nameserver = lloyd.ns.cloudflare.com.
  59. zara.ns.cloudflare.com internet address = 173.245.58.148
  60. zara.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3a94
  61. lloyd.ns.cloudflare.com internet address = 173.245.59.197
  62. lloyd.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3bc5
  63.  
  64. Server: 8.8.8.8
  65. Address: 8.8.8.8#53
  66.  
  67. Non-authoritative answer:
  68. alemarah-english.com nameserver = zara.ns.cloudflare.com.
  69. alemarah-english.com nameserver = lloyd.ns.cloudflare.com.
  70.  
  71. Authoritative answers can be found from:
  72. zara.ns.cloudflare.com internet address = 173.245.58.148
  73. zara.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3a94
  74. lloyd.ns.cloudflare.com internet address = 173.245.59.197
  75. lloyd.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3bc5
  76.  
  77. -----DIG-----Results----
  78. only to see if different than nslookup
  79.  
  80. ; <<>> DiG 9.11.2-P1-1-Debian <<>> alemarah-english.com
  81. ;; global options: +cmd
  82. ;; Got answer:
  83. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20329
  84. ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 5
  85.  
  86. ;; OPT PSEUDOSECTION:
  87. ; EDNS: version: 0, flags:; udp: 4096
  88. ;; QUESTION SECTION:
  89. ;alemarah-english.com. IN A
  90.  
  91. ;; ANSWER SECTION:
  92. alemarah-english.com. 298 IN A 104.28.0.24
  93. alemarah-english.com. 298 IN A 104.28.1.24
  94.  
  95. ;; AUTHORITY SECTION:
  96. alemarah-english.com. 85485 IN NS lloyd.ns.cloudflare.com.
  97. alemarah-english.com. 85485 IN NS zara.ns.cloudflare.com.
  98.  
  99. ;; ADDITIONAL SECTION:
  100. zara.ns.cloudflare.com. 171884 IN A 173.245.58.148
  101. zara.ns.cloudflare.com. 171884 IN AAAA 2400:cb00:2049:1::adf5:3a94
  102. lloyd.ns.cloudflare.com. 171884 IN A 173.245.59.197
  103. lloyd.ns.cloudflare.com. 171884 IN AAAA 2400:cb00:2049:1::adf5:3bc5
  104.  
  105. ;; Query time: 177 msec
  106. ;; SERVER: 8.8.8.8#53(8.8.8.8)
  107. ;; WHEN: Mon Feb 12 17:18:50 CST 2018
  108. ;; MSG SIZE rcvd: 222
  109.  
  110. -----NMAP SCAN RESULT------
  111.  
  112. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 17:18 CST
  113. Initiating Ping Scan at 17:18
  114. Scanning alemarah-english.com (104.28.1.24) [4 ports]
  115. Completed Ping Scan at 17:18, 0.43s elapsed (1 total hosts)
  116. Initiating Parallel DNS resolution of 1 host. at 17:18
  117. Completed Parallel DNS resolution of 1 host. at 17:18, 0.62s elapsed
  118. Initiating SYN Stealth Scan at 17:18
  119. Scanning alemarah-english.com (104.28.1.24) [1000 ports]
  120. Discovered open port 53/tcp on 104.28.1.24
  121. Discovered open port 80/tcp on 104.28.1.24
  122. Discovered open port 8080/tcp on 104.28.1.24
  123. Discovered open port 443/tcp on 104.28.1.24
  124. Discovered open port 8443/tcp on 104.28.1.24
  125. Completed SYN Stealth Scan at 17:19, 13.99s elapsed (1000 total ports)
  126. Nmap scan report for alemarah-english.com (104.28.1.24)
  127. Host is up (0.21s latency).
  128. Other addresses for alemarah-english.com (not scanned): 104.28.0.24 2400:cb00:2048:1::681c:18 2400:cb00:2048:1::681c:118
  129. Not shown: 995 filtered ports
  130. PORT STATE SERVICE
  131. 53/tcp open domain
  132. 80/tcp open http
  133. 443/tcp open https
  134. 8080/tcp open http-proxy
  135. 8443/tcp open https-alt
  136.  
  137. Read data files from: /usr/bin/../share/nmap
  138. Nmap done: 1 IP address (1 host up) scanned in 15.33 seconds
  139. Raw packets sent: 2005 (88.196KB) | Rcvd: 15 (723B)
  140. ------WHO-----IS-----INFO-----
  141. Domain Name: ALEMARAH-ENGLISH.COM
  142. Registry Domain ID: 2038491986_DOMAIN_COM-VRSN
  143. Registrar WHOIS Server: whois.namecheap.com
  144. Registrar URL: http://www.namecheap.com
  145. Updated Date: 2018-02-11T23:55:19Z
  146. Creation Date: 2016-06-29T22:05:43Z
  147. Registry Expiry Date: 2018-06-29T22:05:43Z
  148. Registrar: NameCheap Inc.
  149. Registrar IANA ID: 1068
  150. Registrar Abuse Contact Email: abuse@namecheap.com
  151. Registrar Abuse Contact Phone: +1.6613102107
  152. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  153. Name Server: LLOYD.NS.CLOUDFLARE.COM
  154. Name Server: ZARA.NS.CLOUDFLARE.COM
  155. DNSSEC: unsigned
  156. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  157. >>> Last update of whois database: 2018-02-12T23:18:55Z <<<
  158.  
  159. For more information on Whois status codes, please visit https://icann.org/epp
  160.  
  161. NOTICE: The expiration date displayed in this record is the date the
  162. registrar's sponsorship of the domain name registration in the registry is
  163. currently set to expire. This date does not necessarily reflect the expiration
  164. date of the domain name registrant's agreement with the sponsoring
  165. registrar. Users may consult the sponsoring registrar's Whois database to
  166. view the registrar's reported date of expiration for this registration.
  167.  
  168. Domain name: alemarah-english.com
  169. Registry Domain ID: 2038491986_DOMAIN_COM-VRSN
  170. Registrar WHOIS Server: whois.namecheap.com
  171. Registrar URL: http://www.namecheap.com
  172. Updated Date: 2018-01-08T15:00:11.00Z
  173. Creation Date: 2016-06-29T22:05:43.00Z
  174. Registrar Registration Expiration Date: 2018-06-29T22:05:43.00Z
  175. Registrar: NAMECHEAP INC
  176. Registrar IANA ID: 1068
  177. Registrar Abuse Contact Email: abuse@namecheap.com
  178. Registrar Abuse Contact Phone: +1.6613102107
  179. Reseller: NAMECHEAP INC
  180. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  181. Domain Status: ok https://icann.org/epp#ok
  182. Registry Registrant ID:
  183. Registrant Name: WhoisGuard Protected
  184. Registrant Organization: WhoisGuard, Inc.
  185. Registrant Street: P.O. Box 0823-03411
  186. Registrant City: Panama
  187. Registrant State/Province: Panama
  188. Registrant Postal Code: 00000
  189. Registrant Country: PA
  190. Registrant Phone: +507.8365503
  191. Registrant Phone Ext:
  192. Registrant Fax: +51.17057182
  193. Registrant Fax Ext:
  194. Registrant Email: 32e58e1d57b8400586741d4f83ee6850.protect@whoisguard.com
  195. Registry Admin ID:
  196. Admin Name: WhoisGuard Protected
  197. Admin Organization: WhoisGuard, Inc.
  198. Admin Street: P.O. Box 0823-03411
  199. Admin City: Panama
  200. Admin State/Province: Panama
  201. Admin Postal Code: 00000
  202. Admin Country: PA
  203. Admin Phone: +507.8365503
  204. Admin Phone Ext:
  205. Admin Fax: +51.17057182
  206. Admin Fax Ext:
  207. Admin Email: 32e58e1d57b8400586741d4f83ee6850.protect@whoisguard.com
  208. Registry Tech ID:
  209. Tech Name: WhoisGuard Protected
  210. Tech Organization: WhoisGuard, Inc.
  211. Tech Street: P.O. Box 0823-03411
  212. Tech City: Panama
  213. Tech State/Province: Panama
  214. Tech Postal Code: 00000
  215. Tech Country: PA
  216. Tech Phone: +507.8365503
  217. Tech Phone Ext:
  218. Tech Fax: +51.17057182
  219. Tech Fax Ext:
  220. Tech Email: 32e58e1d57b8400586741d4f83ee6850.protect@whoisguard.com
  221. Name Server: zara.ns.cloudflare.com
  222. Name Server: lloyd.ns.cloudflare.com
  223. DNSSEC: unsigned
  224. URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
  225. >>> Last update of WHOIS database: 2018-02-12T09:03:57.29Z <<<
  226.  
  227. For more information on Whois status codes, please visit https://icann.org/epp
  228. ----DOMAIN HISTORY REPORT -----
  229. Domain History
  230. 104.28.1.24
  231. 104.28.0.24
  232. 69.64.147.10
  233. 104.28.1.24
  234. 104.28.0.24
  235. 104.28.1.24
  236. 104.28.0.24
  237. 104.28.1.24
  238. 104.28.0.24
  239. 104.25.76.18
  240. 104.28.0.24
  241. 104.25.76.18
  242. 104.25.77.18
  243. 104.25.76.18
  244. 104.25.77.18
  245. 104.25.76.18
  246. 104.25.77.18
  247. 104.25.76.18
  248.  
  249. ___ ______ _________ ___ _______
  250. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  251. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  252. |_|_\___/ \_/_|___/_|_\|___/___/___/
  253. / __| __/ __|
  254. \__ \ _| (__
  255. |___/___\___|
  256.  
  257. ____________________________________________
  258. | Auto Footprint Tool |
  259. | By: Y0urN3w0wn3r |
  260. | www.ReversedSec.com |
  261. |____________________________________________|
  262. ____________________________________
  263. | NSHELP RESULTS FOR |
  264. | already-happened.com |
  265. |____________________________________|
  266. Server: 8.8.8.8
  267. Address: 8.8.8.8#53
  268.  
  269. Non-authoritative answer:
  270. Name: already-happened.com
  271. Address: 192.0.78.24
  272. Name: already-happened.com
  273. Address: 192.0.78.25
  274.  
  275. Server: 8.8.8.8
  276. Address: 8.8.8.8#53
  277.  
  278. Non-authoritative answer:
  279. *** Can't find already-happened.com: No answer
  280.  
  281. Authoritative answers can be found from:
  282. already-happened.com
  283. origin = ns1.wordpress.com
  284. mail addr = hostmaster.wordpress.com
  285. serial = 2005071858
  286. refresh = 14400
  287. retry = 7200
  288. expire = 604800
  289. minimum = 300
  290.  
  291. Server: 8.8.8.8
  292. Address: 8.8.8.8#53
  293.  
  294. Non-authoritative answer:
  295. already-happened.com
  296. origin = ns1.wordpress.com
  297. mail addr = hostmaster.wordpress.com
  298. serial = 2005071858
  299. refresh = 14400
  300. retry = 7200
  301. expire = 604800
  302. minimum = 300
  303.  
  304. Authoritative answers can be found from:
  305. already-happened.com nameserver = ns1.wordpress.com.
  306. already-happened.com nameserver = ns3.wordpress.com.
  307. already-happened.com nameserver = ns2.wordpress.com.
  308. ns1.wordpress.com internet address = 198.181.116.9
  309. ns1.wordpress.com has AAAA address 2a04:fa87:ffff::c6b5:7409
  310. ns2.wordpress.com internet address = 198.181.117.9
  311. ns2.wordpress.com has AAAA address 2a04:fa87:ffff::c6b5:7509
  312. ns3.wordpress.com internet address = 192.0.74.9
  313. ns3.wordpress.com has AAAA address 2620:115:c00f::c000:4a09
  314.  
  315. Server: 8.8.8.8
  316. Address: 8.8.8.8#53
  317.  
  318. Non-authoritative answer:
  319. already-happened.com nameserver = ns1.wordpress.com.
  320. already-happened.com nameserver = ns3.wordpress.com.
  321. already-happened.com nameserver = ns2.wordpress.com.
  322.  
  323. Authoritative answers can be found from:
  324. ns1.wordpress.com internet address = 198.181.116.9
  325. ns1.wordpress.com has AAAA address 2a04:fa87:ffff::c6b5:7409
  326. ns2.wordpress.com internet address = 198.181.117.9
  327. ns2.wordpress.com has AAAA address 2a04:fa87:ffff::c6b5:7509
  328. ns3.wordpress.com internet address = 192.0.74.9
  329. ns3.wordpress.com has AAAA address 2620:115:c00f::c000:4a09
  330.  
  331. -----DIG-----Results----
  332. only to see if different than nslookup
  333.  
  334. ; <<>> DiG 9.11.2-P1-1-Debian <<>> already-happened.com ANY
  335. ;; global options: +cmd
  336. ;; Got answer:
  337. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16636
  338. ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 3, ADDITIONAL: 7
  339.  
  340. ;; OPT PSEUDOSECTION:
  341. ; EDNS: version: 0, flags:; udp: 4096
  342. ;; QUESTION SECTION:
  343. ;already-happened.com. IN ANY
  344.  
  345. ;; ANSWER SECTION:
  346. already-happened.com. 86397 IN SOA ns1.wordpress.com. hostmaster.wordpress.com. 2005071858 14400 7200 604800 300
  347. already-happened.com. 296 IN A 192.0.78.25
  348. already-happened.com. 296 IN A 192.0.78.24
  349. already-happened.com. 86397 IN NS ns3.wordpress.com.
  350. already-happened.com. 86397 IN NS ns1.wordpress.com.
  351. already-happened.com. 86397 IN NS ns2.wordpress.com.
  352.  
  353. ;; AUTHORITY SECTION:
  354. already-happened.com. 86397 IN NS ns2.wordpress.com.
  355. already-happened.com. 86397 IN NS ns3.wordpress.com.
  356. already-happened.com. 86397 IN NS ns1.wordpress.com.
  357.  
  358. ;; ADDITIONAL SECTION:
  359. ns1.wordpress.com. 21832 IN A 198.181.116.9
  360. ns1.wordpress.com. 110871 IN AAAA 2a04:fa87:ffff::c6b5:7409
  361. ns2.wordpress.com. 21832 IN A 198.181.117.9
  362. ns2.wordpress.com. 110871 IN AAAA 2a04:fa87:ffff::c6b5:7509
  363. ns3.wordpress.com. 21832 IN A 192.0.74.9
  364. ns3.wordpress.com. 21832 IN AAAA 2620:115:c00f::c000:4a09
  365.  
  366. ;; Query time: 173 msec
  367. ;; SERVER: 8.8.8.8#53(8.8.8.8)
  368. ;; WHEN: Mon Feb 12 17:38:16 CST 2018
  369. ;; MSG SIZE rcvd: 366
  370.  
  371. -----NMAP SCAN RESULT------
  372.  
  373. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 17:38 CST
  374. Initiating Ping Scan at 17:38
  375. Scanning already-happened.com (192.0.78.24) [4 ports]
  376. Completed Ping Scan at 17:38, 0.42s elapsed (1 total hosts)
  377. Initiating Parallel DNS resolution of 1 host. at 17:38
  378. Completed Parallel DNS resolution of 1 host. at 17:38, 0.26s elapsed
  379. Initiating SYN Stealth Scan at 17:38
  380. Scanning already-happened.com (192.0.78.24) [1000 ports]
  381. Discovered open port 53/tcp on 192.0.78.24
  382. Discovered open port 443/tcp on 192.0.78.24
  383. Discovered open port 80/tcp on 192.0.78.24
  384. Completed SYN Stealth Scan at 17:38, 39.58s elapsed (1000 total ports)
  385. Nmap scan report for already-happened.com (192.0.78.24)
  386. Host is up (0.25s latency).
  387. Other addresses for already-happened.com (not scanned): 192.0.78.25
  388. Not shown: 997 filtered ports
  389. PORT STATE SERVICE
  390. 53/tcp open domain
  391. 80/tcp open http
  392. 443/tcp open https
  393.  
  394. Read data files from: /usr/bin/../share/nmap
  395. Nmap done: 1 IP address (1 host up) scanned in 40.60 seconds
  396. Raw packets sent: 2020 (88.856KB) | Rcvd: 52 (5.478KB)
  397. ------WHO-----IS-----INFO-----
  398. Domain Name: ALREADY-HAPPENED.COM
  399. Registry Domain ID: 2098613714_DOMAIN_COM-VRSN
  400. Registrar WHOIS Server: whois.sawbuck.com
  401. Registrar URL: http://www.wordpress.com
  402. Updated Date: 2018-01-26T21:17:35Z
  403. Creation Date: 2017-02-18T08:57:39Z
  404. Registry Expiry Date: 2020-02-18T08:57:39Z
  405. Registrar: Automattic Inc.
  406. Registrar IANA ID: 1531
  407. Registrar Abuse Contact Email: domainabuse@automattic.com
  408. Registrar Abuse Contact Phone: +1 877 273-3049
  409. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  410. Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
  411. Name Server: NS1.WORDPRESS.COM
  412. Name Server: NS2.WORDPRESS.COM
  413. Name Server: NS3.WORDPRESS.COM
  414. DNSSEC: unsigned
  415. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  416. >>> Last update of whois database: 2018-02-12T23:38:49Z <<<
  417.  
  418. For more information on Whois status codes, please visit https://icann.org/epp
  419.  
  420. NOTICE: The expiration date displayed in this record is the date the
  421. registrar's sponsorship of the domain name registration in the registry is
  422. currently set to expire. This date does not necessarily reflect the expiration
  423. date of the domain name registrant's agreement with the sponsoring
  424. registrar. Users may consult the sponsoring registrar's Whois database to
  425. view the registrar's reported date of expiration for this registration.
  426.  
  427. Domain Name: ALREADY-HAPPENED.COM
  428. Domain ID: 2098613714_DOMAIN_COM-VRSN
  429. Registrar WHOIS Server: whois.sawbuck.com
  430. Registrar URL: http://www.automattic.com/
  431. Updated Date: 2018-01-26T21:17:35Z
  432. Creation Date: 2017-02-18T08:57:39Z
  433. Registrar Registration Expiration Date: 2020-02-18T08:57:39Z
  434. Registrar: Automattic Inc.
  435. Registrar IANA ID: 1531
  436. Reseller: WordPress.com
  437. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  438. Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
  439. Registry Registrant ID:
  440. Registrant Name: Private Whois
  441. Registrant Organization: Knock Knock WHOIS Not There, LLC
  442. Registrant Street: 9450 SW Gemini Dr, No. 63259
  443. Registrant City: Beaverton
  444. Registrant State/Province: OR
  445. Registrant Postal Code: 97008-7105
  446. Registrant Country: US
  447. Registrant Phone: +1.8772738550
  448. Registrant Phone Ext:
  449. Registrant Fax:
  450. Registrant Fax Ext:
  451. Registrant Email: already-happened.com@privatewho.is
  452. Registry Admin ID:
  453. Admin Name: Private Whois
  454. Admin Organization: Knock Knock WHOIS Not There, LLC
  455. Admin Street: 9450 SW Gemini Dr, No. 63259
  456. Admin City: Beaverton
  457. Admin State/Province: OR
  458. Admin Postal Code: 97008-7105
  459. Admin Country: US
  460. Admin Phone: +1.8772738550
  461. Admin Phone Ext:
  462. Admin Fax:
  463. Admin Fax Ext:
  464. Admin Email: already-happened.com@privatewho.is
  465. Registry Tech ID:
  466. Tech Name: Private Whois
  467. Tech Organization: Knock Knock WHOIS Not There, LLC
  468. Tech Street: 9450 SW Gemini Dr, No. 63259
  469. Tech City: Beaverton
  470. Tech State/Province: OR
  471. Tech Postal Code: 97008-7105
  472. Tech Country: US
  473. Tech Phone: +1.8772738550
  474. Tech Phone Ext:
  475. Tech Fax:
  476. Tech Fax Ext:
  477. Tech Email: already-happened.com@privatewho.is
  478. Name Server: NS1.WORDPRESS.COM
  479. Name Server: NS2.WORDPRESS.COM
  480. Name Server: NS3.WORDPRESS.COM
  481. DNSSEC: unsigned
  482. Registrar Abuse Contact Email: domainabuse@automattic.com
  483. Registrar Abuse Contact Phone: +1.8772733049
  484. URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
  485. >>> Last update of WHOIS database: 2018-01-26T21:17:35Z <<<
  486.  
  487. "For more information on Whois status codes, please visit https://icann.org/epp"
  488.  
  489. Registration Service Provider:
  490. WordPress.com, help@wordpress.com
  491. +1.8772733049
  492. http://WordPress.com/
  493. This company may be contacted for domain login/passwords,
  494. DNS/Nameserver changes, and general domain support questions.
  495.  
  496. The data in Automattic’s WHOIS database is available “as is,” with no guarantee or warranties regarding its accuracy. This data is provided for informational purposes only, to assist you in obtaining information about domain name registration records. Using this data for any other purpose, including the compilation, repackaging, or dissemination of this data, is expressly prohibited without prior written consent of Automattic. You agree that you will use this data for lawful purposes, and under no circumstances will you (1) use this data to allow, enable, or otherwise make possible the the transmission of mass, unsolicited, commercial advertising or solicitations; or (2) enable high volume, automated, or electronic processes that send queries or data to the systems of any Registry Operator or ICANN­Accredited Registrar, except as reasonably necessary to register domain names or modify existing registrations.
  497.  
  498. By submitting a WHOIS query, you agree to these terms of use and limitations of warranty. Automattic reserves the right to modify these terms at any time and/or terminate your access to the Automattic WHOIS database in its sole discretion.
  499.  
  500. NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY. LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.
  501. ----HOSTNAME HISTORY-----
  502. DNS Status:
  503. A | 192.0.78.24
  504. A | 192.0.78.25
  505. NS | ns2.wordpress.com
  506. NS | ns3.wordpress.com
  507. NS | ns1.wordpress.com
  508. Subdomain Bruteforce:
  509. www.already-happened.com | 192.0.78.24
  510. www2.already-happened.com | 192.0.78.25
  511. dashboard.already-happened.com | 192.0.78.25
  512. anycast.already-happened.com | 192.0.78.24
  513. admin.already-happened.com | 192.0.78.24
  514. app.already-happened.com | 192.0.78.24
  515. panel.already-happened.com | 192.0.78.25
  516. embed.already-happened.com | 192.0.78.25
  517. autoconfig.already-happened.com | 192.0.78.25
  518. autodiscover.already-happened.com | 192.0.78.24
  519. private.already-happened.com | 192.0.78.25
  520. mail.already-happened.com | 192.0.78.25
  521. direct.already-happened.com | 192.0.78.25
  522. direct-connect.already-happened.com | 192.0.78.24
  523. cpanel.already-happened.com | 192.0.78.24
  524. ftp.already-happened.com | 192.0.78.25
  525. pop.already-happened.com | 192.0.78.25
  526. imap.already-happened.com | 192.0.78.24
  527. forum.already-happened.com | 192.0.78.25
  528. blog.already-happened.com | 192.0.78.25
  529. portal.already-happened.com | 192.0.78.25
  530. beta.already-happened.com | 192.0.78.24
  531. dev.already-happened.com | 192.0.78.24
  532. webmail.already-happened.com | 192.0.78.25
  533. record.already-happened.com | 192.0.78.25
  534. ssl.already-happened.com | 192.0.78.25
  535. dns.already-happened.com | 192.0.78.24
  536. ts3.already-happened.com | 192.0.78.24
  537. m.already-happened.com | 192.0.78.24
  538. mobile.already-happened.com | 192.0.78.24
  539. help.already-happened.com | 192.0.78.25
  540. wiki.already-happened.com | 192.0.78.24
  541. client.already-happened.com | 192.0.78.24
  542. server.already-happened.com | 192.0.78.25
  543. api.already-happened.com | 192.0.78.25
  544. i.already-happened.com | 192.0.78.24
  545. x.already-happened.com | 192.0.78.24
  546. cdn.already-happened.com | 192.0.78.25
  547. images.already-happened.com | 192.0.78.24
  548. my.already-happened.com | 192.0.78.24
  549. java.already-happened.com | 192.0.78.24
  550. swf.already-happened.com | 192.0.78.24
  551. smtp.already-happened.com | 192.0.78.25
  552. ns.already-happened.com | 192.0.78.25
  553. ns1.already-happened.com | 192.0.78.25
  554. ns2.already-happened.com | 192.0.78.24
  555. ns3.already-happened.com | 192.0.78.24
  556. mx.already-happened.com | 192.0.78.25
  557. server.already-happened.com | 192.0.78.25
  558. server1.already-happened.com | 192.0.78.24
  559. server2.already-happened.com | 192.0.78.24
  560. test.already-happened.com | 192.0.78.25
  561. vpn.already-happened.com | 192.0.78.25
  562. secure.already-happened.com | 192.0.78.25
  563. login.already-happened.com | 192.0.78.24
  564. store.already-happened.com | 192.0.78.25
  565. zabbix.already-happened.com | 192.0.78.24
  566. cacti.already-happened.com | 192.0.78.24
  567. mysql.already-happened.com | 192.0.78.25
  568. search.already-happened.com | 192.0.78.25
  569. monitor.already-happened.com | 192.0.78.24
  570. nagios.already-happened.com | 192.0.78.24
  571. munin.already-happened.com | 192.0.78.24
  572. data.already-happened.com | 192.0.78.25
  573. old.already-happened.com | 192.0.78.25
  574. stat.already-happened.com | 192.0.78.24
  575. stats.already-happened.com | 192.0.78.24
  576. preview.already-happened.com | 192.0.78.25
  577. phpmyadmin.already-happened.com | 192.0.78.24
  578. db.already-happened.com | 192.0.78.25
  579. demo.already-happened.com | 192.0.78.24
  580. status.already-happened.com | 192.0.78.25
  581. gateway.already-happened.com | 192.0.78.25
  582. gateway1.already-happened.com | 192.0.78.24
  583. gateway2.already-happened.com | 192.0.78.24
  584.  
  585. ___ ______ _________ ___ _______
  586. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  587. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  588. |_|_\___/ \_/_|___/_|_\|___/___/___/
  589. / __| __/ __|
  590. \__ \ _| (__
  591. |___/___\___|
  592.  
  593. ____________________________________________
  594. | Auto Footprint Tool |
  595. | By: Y0urN3w0wn3r |
  596. | www.ReversedSec.com |
  597. |____________________________________________|
  598. ____________________________________
  599. | NSHELP RESULTS FOR |
  600. | arrahmah.com |
  601. |____________________________________|
  602. Server: 8.8.8.8
  603. Address: 8.8.8.8#53
  604.  
  605. Non-authoritative answer:
  606. Name: arrahmah.com
  607. Address: 104.18.33.185
  608. Name: arrahmah.com
  609. Address: 104.18.32.185
  610.  
  611. Server: 8.8.8.8
  612. Address: 8.8.8.8#53
  613.  
  614. Non-authoritative answer:
  615. arrahmah.com mail exchanger = 10 968152461.pamx1.hotmail.com.
  616.  
  617. Authoritative answers can be found from:
  618. arrahmah.com nameserver = clyde.ns.cloudflare.com.
  619. arrahmah.com nameserver = lia.ns.cloudflare.com.
  620. lia.ns.cloudflare.com internet address = 173.245.58.185
  621. lia.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3ab9
  622. clyde.ns.cloudflare.com internet address = 173.245.59.91
  623. clyde.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3b5b
  624.  
  625. Server: 8.8.8.8
  626. Address: 8.8.8.8#53
  627.  
  628. Non-authoritative answer:
  629. arrahmah.com
  630. origin = clyde.ns.cloudflare.com
  631. mail addr = dns.cloudflare.com
  632. serial = 2026832006
  633. refresh = 10000
  634. retry = 2400
  635. expire = 604800
  636. minimum = 3600
  637.  
  638. Authoritative answers can be found from:
  639. arrahmah.com nameserver = clyde.ns.cloudflare.com.
  640. arrahmah.com nameserver = lia.ns.cloudflare.com.
  641. lia.ns.cloudflare.com internet address = 173.245.58.185
  642. lia.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3ab9
  643. clyde.ns.cloudflare.com internet address = 173.245.59.91
  644. clyde.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3b5b
  645.  
  646. Server: 8.8.8.8
  647. Address: 8.8.8.8#53
  648.  
  649. Non-authoritative answer:
  650. arrahmah.com nameserver = lia.ns.cloudflare.com.
  651. arrahmah.com nameserver = clyde.ns.cloudflare.com.
  652.  
  653. Authoritative answers can be found from:
  654. lia.ns.cloudflare.com internet address = 173.245.58.185
  655. lia.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3ab9
  656. clyde.ns.cloudflare.com internet address = 173.245.59.91
  657. clyde.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3b5b
  658.  
  659. -----DIG-----Results----
  660. only to see if different than nslookup
  661.  
  662. ; <<>> DiG 9.11.2-P1-1-Debian <<>> arrahmah.com ANY
  663. ;; global options: +cmd
  664. ;; Got answer:
  665. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24125
  666. ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 2, ADDITIONAL: 5
  667.  
  668. ;; OPT PSEUDOSECTION:
  669. ; EDNS: version: 0, flags:; udp: 4096
  670. ;; QUESTION SECTION:
  671. ;arrahmah.com. IN ANY
  672.  
  673. ;; ANSWER SECTION:
  674. arrahmah.com. 3597 IN SOA clyde.ns.cloudflare.com. dns.cloudflare.com. 2026832006 10000 2400 604800 3600
  675. arrahmah.com. 297 IN MX 10 968152461.pamx1.hotmail.com.
  676. arrahmah.com. 297 IN A 104.18.33.185
  677. arrahmah.com. 297 IN A 104.18.32.185
  678. arrahmah.com. 86397 IN NS lia.ns.cloudflare.com.
  679. arrahmah.com. 86397 IN NS clyde.ns.cloudflare.com.
  680.  
  681. ;; AUTHORITY SECTION:
  682. arrahmah.com. 86397 IN NS clyde.ns.cloudflare.com.
  683. arrahmah.com. 86397 IN NS lia.ns.cloudflare.com.
  684.  
  685. ;; ADDITIONAL SECTION:
  686. lia.ns.cloudflare.com. 29955 IN A 173.245.58.185
  687. lia.ns.cloudflare.com. 29955 IN AAAA 2400:cb00:2049:1::adf5:3ab9
  688. clyde.ns.cloudflare.com. 732 IN A 173.245.59.91
  689. clyde.ns.cloudflare.com. 732 IN AAAA 2400:cb00:2049:1::adf5:3b5b
  690.  
  691. ;; Query time: 184 msec
  692. ;; SERVER: 8.8.8.8#53(8.8.8.8)
  693. ;; WHEN: Mon Feb 12 17:24:29 CST 2018
  694. ;; MSG SIZE rcvd: 321
  695.  
  696. -----NMAP SCAN RESULT------
  697.  
  698. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 17:24 CST
  699. Initiating Ping Scan at 17:24
  700. Scanning arrahmah.com (104.18.33.185) [4 ports]
  701. Completed Ping Scan at 17:24, 0.42s elapsed (1 total hosts)
  702. Initiating Parallel DNS resolution of 1 host. at 17:24
  703. Completed Parallel DNS resolution of 1 host. at 17:24, 0.78s elapsed
  704. Initiating SYN Stealth Scan at 17:24
  705. Scanning arrahmah.com (104.18.33.185) [1000 ports]
  706. Discovered open port 8080/tcp on 104.18.33.185
  707. Discovered open port 80/tcp on 104.18.33.185
  708. Discovered open port 443/tcp on 104.18.33.185
  709. Discovered open port 53/tcp on 104.18.33.185
  710. Discovered open port 8443/tcp on 104.18.33.185
  711. Completed SYN Stealth Scan at 17:25, 34.98s elapsed (1000 total ports)
  712. Nmap scan report for arrahmah.com (104.18.33.185)
  713. Host is up (0.23s latency).
  714. Other addresses for arrahmah.com (not scanned): 104.18.32.185 2400:cb00:2048:1::6812:21b9 2400:cb00:2048:1::6812:20b9
  715. Not shown: 995 filtered ports
  716. PORT STATE SERVICE
  717. 53/tcp open domain
  718. 80/tcp open http
  719. 443/tcp open https
  720. 8080/tcp open http-proxy
  721. 8443/tcp open https-alt
  722.  
  723. Read data files from: /usr/bin/../share/nmap
  724. Nmap done: 1 IP address (1 host up) scanned in 36.52 seconds
  725. Raw packets sent: 3013 (132.548KB) | Rcvd: 31 (1.465KB)
  726. ------WHO-----IS-----INFO-----
  727. Domain Name: ARRAHMAH.COM
  728. Registry Domain ID: 196176600_DOMAIN_COM-VRSN
  729. Registrar WHOIS Server: whois.PublicDomainRegistry.com
  730. Registrar URL: http://www.publicdomainregistry.com
  731. Updated Date: 2017-08-04T01:03:29Z
  732. Creation Date: 2005-08-14T14:28:28Z
  733. Registry Expiry Date: 2018-08-14T14:28:28Z
  734. Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
  735. Registrar IANA ID: 303
  736. Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
  737. Registrar Abuse Contact Phone: +1.2013775952
  738. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  739. Name Server: CLYDE.NS.CLOUDFLARE.COM
  740. Name Server: LIA.NS.CLOUDFLARE.COM
  741. DNSSEC: unsigned
  742. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  743. >>> Last update of whois database: 2018-02-12T23:25:00Z <<<
  744.  
  745. For more information on Whois status codes, please visit https://icann.org/epp
  746.  
  747. NOTICE: The expiration date displayed in this record is the date the
  748. registrar's sponsorship of the domain name registration in the registry is
  749. currently set to expire. This date does not necessarily reflect the expiration
  750. date of the domain name registrant's agreement with the sponsoring
  751. registrar. Users may consult the sponsoring registrar's Whois database to
  752. view the registrar's reported date of expiration for this registration.
  753.  
  754. Domain Name: ARRAHMAH.COM
  755. Registry Domain ID: 196176600_DOMAIN_COM-VRSN
  756. Registrar WHOIS Server: whois.publicdomainregistry.com
  757. Registrar URL: www.publicdomainregistry.com
  758. Updated Date: 2017-09-20T12:45:58Z
  759. Creation Date: 2005-08-14T14:28:28Z
  760. Registrar Registration Expiration Date: 2018-08-14T14:28:28Z
  761. Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
  762. Registrar IANA ID: 303
  763. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  764. Registry Registrant ID: Not Available From Registry
  765. Registrant Name: Fadly
  766. Registrant Organization:
  767. Registrant Street: Ciputat
  768. Registrant City: Tangerang
  769. Registrant State/Province: Jakarta
  770. Registrant Postal Code: 15500
  771. Registrant Country: ID
  772. Registrant Phone: +62.85217474630
  773. Registrant Phone Ext:
  774. Registrant Fax:
  775. Registrant Fax Ext:
  776. Registrant Email: fad.lee@yahoo.com
  777. Registry Admin ID: Not Available From Registry
  778. Admin Name: Fadly
  779. Admin Organization:
  780. Admin Street: Ciputat
  781. Admin City: Tangerang
  782. Admin State/Province: Jakarta
  783. Admin Postal Code: 15500
  784. Admin Country: ID
  785. Admin Phone: +62.85217474630
  786. Admin Phone Ext:
  787. Admin Fax:
  788. Admin Fax Ext:
  789. Admin Email: fad.lee@yahoo.com
  790. Registry Tech ID: Not Available From Registry
  791. Tech Name: Fadly
  792. Tech Organization:
  793. Tech Street: Ciputat
  794. Tech City: Tangerang
  795. Tech State/Province: Jakarta
  796. Tech Postal Code: 15500
  797. Tech Country: ID
  798. Tech Phone: +62.85217474630
  799. Tech Phone Ext:
  800. Tech Fax:
  801. Tech Fax Ext:
  802. Tech Email: fad.lee@yahoo.com
  803. Name Server: clyde.ns.cloudflare.com
  804. Name Server: lia.ns.cloudflare.com
  805. DNSSEC: Unsigned
  806. Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
  807. Registrar Abuse Contact Phone: +1.2013775952
  808. URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
  809. >>> Last update of WHOIS database: 2018-02-12T23:25:09Z <<<
  810.  
  811. For more information on Whois status codes, please visit https://icann.org/epp
  812.  
  813. Registration Service Provided By:
  814.  
  815. ___ ______ _________ ___ _______
  816. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  817. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  818. |_|_\___/ \_/_|___/_|_\|___/___/___/
  819. / __| __/ __|
  820. \__ \ _| (__
  821. |___/___\___|
  822.  
  823. ____________________________________________
  824. | Auto Footprint Tool |
  825. | By: Y0urN3w0wn3r |
  826. | www.ReversedSec.com |
  827. |____________________________________________|
  828. ____________________________________
  829. | NSHELP RESULTS FOR |
  830. | azelin.files.wordpress.com |
  831. |____________________________________|
  832. Server: 8.8.8.8
  833. Address: 8.8.8.8#53
  834.  
  835. Non-authoritative answer:
  836. azelin.files.wordpress.com canonical name = s2.files.wordpress.com.
  837. Name: s2.files.wordpress.com
  838. Address: 192.0.72.19
  839. Name: s2.files.wordpress.com
  840. Address: 192.0.72.18
  841.  
  842. Server: 8.8.8.8
  843. Address: 8.8.8.8#53
  844.  
  845. Non-authoritative answer:
  846. azelin.files.wordpress.com canonical name = s2.files.wordpress.com.
  847.  
  848. Authoritative answers can be found from:
  849. files.wordpress.com
  850. origin = mdns1.wordpress.com
  851. mail addr = hostmaster.wordpress.com
  852. serial = 157
  853. refresh = 3600
  854. retry = 600
  855. expire = 604800
  856. minimum = 60
  857.  
  858. Server: 8.8.8.8
  859. Address: 8.8.8.8#53
  860.  
  861. Non-authoritative answer:
  862. azelin.files.wordpress.com canonical name = s2.files.wordpress.com.
  863.  
  864. Authoritative answers can be found from:
  865. files.wordpress.com
  866. origin = mdns1.wordpress.com
  867. mail addr = hostmaster.wordpress.com
  868. serial = 157
  869. refresh = 3600
  870. retry = 600
  871. expire = 604800
  872. minimum = 60
  873.  
  874. Server: 8.8.8.8
  875. Address: 8.8.8.8#53
  876.  
  877. Non-authoritative answer:
  878. azelin.files.wordpress.com canonical name = s2.files.wordpress.com.
  879.  
  880. Authoritative answers can be found from:
  881. files.wordpress.com
  882. origin = mdns1.wordpress.com
  883. mail addr = hostmaster.wordpress.com
  884. serial = 157
  885. refresh = 3600
  886. retry = 600
  887. expire = 604800
  888. minimum = 60
  889.  
  890. -----DIG-----Results----
  891. only to see if different than nslookup
  892.  
  893. ; <<>> DiG 9.11.2-P1-1-Debian <<>> azelin.files.wordpress.com
  894. ;; global options: +cmd
  895. ;; Got answer:
  896. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19267
  897. ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 4, ADDITIONAL: 9
  898.  
  899. ;; OPT PSEUDOSECTION:
  900. ; EDNS: version: 0, flags:; udp: 4096
  901. ;; QUESTION SECTION:
  902. ;azelin.files.wordpress.com. IN A
  903.  
  904. ;; ANSWER SECTION:
  905. azelin.files.wordpress.com. 297 IN CNAME s2.files.wordpress.com.
  906. s2.files.wordpress.com. 297 IN A 192.0.72.19
  907. s2.files.wordpress.com. 297 IN A 192.0.72.18
  908.  
  909. ;; AUTHORITY SECTION:
  910. files.wordpress.com. 297 IN NS mdns2.wordpress.com.
  911. files.wordpress.com. 297 IN NS mdns4.wordpress.com.
  912. files.wordpress.com. 297 IN NS mdns1.wordpress.com.
  913. files.wordpress.com. 297 IN NS mdns3.wordpress.com.
  914.  
  915. ;; ADDITIONAL SECTION:
  916. mdns1.wordpress.com. 13752 IN A 198.181.116.7
  917. mdns1.wordpress.com. 13752 IN AAAA 2a04:fa87:ffff::c6b5:7407
  918. mdns2.wordpress.com. 13752 IN A 198.181.117.7
  919. mdns2.wordpress.com. 13752 IN AAAA 2a04:fa87:ffff::c6b5:7507
  920. mdns3.wordpress.com. 13752 IN A 192.0.74.7
  921. mdns3.wordpress.com. 13752 IN AAAA 2620:115:c00f::c000:4a07
  922. mdns4.wordpress.com. 13752 IN A 192.0.75.7
  923. mdns4.wordpress.com. 13752 IN AAAA 2620:115:c00f::c000:4b07
  924.  
  925. ;; Query time: 300 msec
  926. ;; SERVER: 8.8.8.8#53(8.8.8.8)
  927. ;; WHEN: Mon Feb 12 17:21:11 CST 2018
  928. ;; MSG SIZE rcvd: 360
  929.  
  930. -----NMAP SCAN RESULT------
  931.  
  932. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 17:21 CST
  933. Initiating Ping Scan at 17:21
  934. Scanning azelin.files.wordpress.com (192.0.72.18) [4 ports]
  935. Completed Ping Scan at 17:21, 0.43s elapsed (1 total hosts)
  936. Initiating Parallel DNS resolution of 1 host. at 17:21
  937. Completed Parallel DNS resolution of 1 host. at 17:21, 0.20s elapsed
  938. Initiating SYN Stealth Scan at 17:21
  939. Scanning azelin.files.wordpress.com (192.0.72.18) [1000 ports]
  940. Discovered open port 53/tcp on 192.0.72.18
  941. Discovered open port 80/tcp on 192.0.72.18
  942. Discovered open port 443/tcp on 192.0.72.18
  943. Completed SYN Stealth Scan at 17:21, 13.89s elapsed (1000 total ports)
  944. Nmap scan report for azelin.files.wordpress.com (192.0.72.18)
  945. Host is up (0.20s latency).
  946. Other addresses for azelin.files.wordpress.com (not scanned): 192.0.72.19
  947. Not shown: 997 filtered ports
  948. PORT STATE SERVICE
  949. 53/tcp open domain
  950. 80/tcp open http
  951. 443/tcp open https
  952.  
  953. Read data files from: /usr/bin/../share/nmap
  954. Nmap done: 1 IP address (1 host up) scanned in 14.86 seconds
  955. Raw packets sent: 2007 (88.284KB) | Rcvd: 13 (619B)
  956. ------WHO-----IS-----INFO-----
  957. No match for "AZELIN.FILES.WORDPRESS.COM".
  958. >>> Last update of whois database: 2018-02-12T23:21:12Z <<<
  959.  
  960. NOTICE: The expiration date displayed in this record is the date the
  961. registrar's sponsorship of the domain name registration in the registry is
  962. currently set to expire. This date does not necessarily reflect the expiration
  963. date of the domain name registrant's agreement with the sponsoring
  964. registrar. Users may consult the sponsoring registrar's Whois database to
  965. view the registrar's reported date of expiration for this registration.
  966.  
  967. ___ ______ _________ ___ _______
  968. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  969. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  970. |_|_\___/ \_/_|___/_|_\|___/___/___/
  971. / __| __/ __|
  972. \__ \ _| (__
  973. |___/___\___|
  974.  
  975. ____________________________________________
  976. | Auto Footprint Tool |
  977. | By: Y0urN3w0wn3r |
  978. | www.ReversedSec.com |
  979. |____________________________________________|
  980. ____________________________________
  981. | NSHELP RESULTS FOR |
  982. | jihadica.com |
  983. |____________________________________|
  984. Server: 8.8.8.8
  985. Address: 8.8.8.8#53
  986.  
  987. Non-authoritative answer:
  988. Name: jihadica.com
  989. Address: 104.27.173.226
  990. Name: jihadica.com
  991. Address: 104.27.172.226
  992.  
  993. Server: 8.8.8.8
  994. Address: 8.8.8.8#53
  995.  
  996. Non-authoritative answer:
  997. *** Can't find jihadica.com: No answer
  998.  
  999. Authoritative answers can be found from:
  1000. jihadica.com
  1001. origin = charles.ns.cloudflare.com
  1002. mail addr = dns.cloudflare.com
  1003. serial = 2026838736
  1004. refresh = 10000
  1005. retry = 2400
  1006. expire = 604800
  1007. minimum = 3600
  1008.  
  1009. Server: 8.8.8.8
  1010. Address: 8.8.8.8#53
  1011.  
  1012. Non-authoritative answer:
  1013. jihadica.com
  1014. origin = charles.ns.cloudflare.com
  1015. mail addr = dns.cloudflare.com
  1016. serial = 2026838736
  1017. refresh = 10000
  1018. retry = 2400
  1019. expire = 604800
  1020. minimum = 3600
  1021.  
  1022. Authoritative answers can be found from:
  1023. jihadica.com nameserver = charles.ns.cloudflare.com.
  1024. jihadica.com nameserver = venus.ns.cloudflare.com.
  1025. venus.ns.cloudflare.com internet address = 173.245.58.235
  1026. venus.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3aeb
  1027. charles.ns.cloudflare.com internet address = 173.245.59.83
  1028. charles.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3b53
  1029.  
  1030. Server: 8.8.8.8
  1031. Address: 8.8.8.8#53
  1032.  
  1033. Non-authoritative answer:
  1034. jihadica.com nameserver = venus.ns.cloudflare.com.
  1035. jihadica.com nameserver = charles.ns.cloudflare.com.
  1036.  
  1037. Authoritative answers can be found from:
  1038. venus.ns.cloudflare.com internet address = 173.245.58.235
  1039. venus.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3aeb
  1040. charles.ns.cloudflare.com internet address = 173.245.59.83
  1041. charles.ns.cloudflare.com has AAAA address 2400:cb00:2049:1::adf5:3b53
  1042.  
  1043. -----DIG-----Results----
  1044. only to see if different than nslookup
  1045.  
  1046. ; <<>> DiG 9.11.2-P1-1-Debian <<>> jihadica.com ANY
  1047. ;; global options: +cmd
  1048. ;; Got answer:
  1049. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62453
  1050. ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 5
  1051.  
  1052. ;; OPT PSEUDOSECTION:
  1053. ; EDNS: version: 0, flags:; udp: 4096
  1054. ;; QUESTION SECTION:
  1055. ;jihadica.com. IN ANY
  1056.  
  1057. ;; ANSWER SECTION:
  1058. jihadica.com. 3597 IN SOA charles.ns.cloudflare.com. dns.cloudflare.com. 2026838736 10000 2400 604800 3600
  1059. jihadica.com. 297 IN A 104.27.173.226
  1060. jihadica.com. 297 IN A 104.27.172.226
  1061. jihadica.com. 86397 IN NS charles.ns.cloudflare.com.
  1062. jihadica.com. 86397 IN NS venus.ns.cloudflare.com.
  1063.  
  1064. ;; AUTHORITY SECTION:
  1065. jihadica.com. 86397 IN NS charles.ns.cloudflare.com.
  1066. jihadica.com. 86397 IN NS venus.ns.cloudflare.com.
  1067.  
  1068. ;; ADDITIONAL SECTION:
  1069. venus.ns.cloudflare.com. 40582 IN A 173.245.58.235
  1070. venus.ns.cloudflare.com. 40582 IN AAAA 2400:cb00:2049:1::adf5:3aeb
  1071. charles.ns.cloudflare.com. 36577 IN A 173.245.59.83
  1072. charles.ns.cloudflare.com. 36577 IN AAAA 2400:cb00:2049:1::adf5:3b53
  1073.  
  1074. ;; Query time: 179 msec
  1075. ;; SERVER: 8.8.8.8#53(8.8.8.8)
  1076. ;; WHEN: Mon Feb 12 18:20:54 CST 2018
  1077. ;; MSG SIZE rcvd: 285
  1078.  
  1079. -----NMAP SCAN RESULT------
  1080.  
  1081. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 18:20 CST
  1082. Initiating Ping Scan at 18:20
  1083. Scanning jihadica.com (104.27.172.226) [4 ports]
  1084. Completed Ping Scan at 18:20, 0.42s elapsed (1 total hosts)
  1085. Initiating Parallel DNS resolution of 1 host. at 18:20
  1086. Completed Parallel DNS resolution of 1 host. at 18:20, 0.64s elapsed
  1087. Initiating SYN Stealth Scan at 18:20
  1088. Scanning jihadica.com (104.27.172.226) [1000 ports]
  1089. Discovered open port 53/tcp on 104.27.172.226
  1090. Discovered open port 8080/tcp on 104.27.172.226
  1091. Discovered open port 443/tcp on 104.27.172.226
  1092. Discovered open port 80/tcp on 104.27.172.226
  1093. Discovered open port 8443/tcp on 104.27.172.226
  1094. Completed SYN Stealth Scan at 18:21, 16.43s elapsed (1000 total ports)
  1095. Nmap scan report for jihadica.com (104.27.172.226)
  1096. Host is up (0.22s latency).
  1097. Other addresses for jihadica.com (not scanned): 104.27.173.226 2400:cb00:2048:1::681b:ace2 2400:cb00:2048:1::681b:ade2
  1098. Not shown: 995 filtered ports
  1099. PORT STATE SERVICE
  1100. 53/tcp open domain
  1101. 80/tcp open http
  1102. 443/tcp open https
  1103. 8080/tcp open http-proxy
  1104. 8443/tcp open https-alt
  1105.  
  1106. Read data files from: /usr/bin/../share/nmap
  1107. Nmap done: 1 IP address (1 host up) scanned in 17.80 seconds
  1108. Raw packets sent: 2007 (88.284KB) | Rcvd: 17 (795B)
  1109. ------WHO-----IS-----INFO-----
  1110. Domain Name: JIHADICA.COM
  1111. Registry Domain ID: 1440040939_DOMAIN_COM-VRSN
  1112. Registrar WHOIS Server: whois.godaddy.com
  1113. Registrar URL: http://www.godaddy.com
  1114. Updated Date: 2016-04-07T19:38:33Z
  1115. Creation Date: 2008-04-01T16:58:07Z
  1116. Registry Expiry Date: 2018-04-01T16:58:07Z
  1117. Registrar: GoDaddy.com, LLC
  1118. Registrar IANA ID: 146
  1119. Registrar Abuse Contact Email: abuse@godaddy.com
  1120. Registrar Abuse Contact Phone: 480-624-2505
  1121. Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
  1122. Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
  1123. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  1124. Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
  1125. Name Server: CHARLES.NS.CLOUDFLARE.COM
  1126. Name Server: VENUS.NS.CLOUDFLARE.COM
  1127. DNSSEC: unsigned
  1128. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  1129. >>> Last update of whois database: 2018-02-13T00:21:00Z <<<
  1130.  
  1131. For more information on Whois status codes, please visit https://icann.org/epp
  1132.  
  1133. NOTICE: The expiration date displayed in this record is the date the
  1134. registrar's sponsorship of the domain name registration in the registry is
  1135. currently set to expire. This date does not necessarily reflect the expiration
  1136. date of the domain name registrant's agreement with the sponsoring
  1137. registrar. Users may consult the sponsoring registrar's Whois database to
  1138. view the registrar's reported date of expiration for this registration.
  1139.  
  1140. Domain Name: JIHADICA.COM
  1141. Registrar URL: http://www.godaddy.com
  1142. Registrant Name: Registration Private
  1143. Registrant Organization: Domains By Proxy, LLC
  1144. Name Server: CHARLES.NS.CLOUDFLARE.COM
  1145. Name Server: VENUS.NS.CLOUDFLARE.COM
  1146. DNSSEC: unsigned
  1147.  
  1148. ****************************************************
  1149. See Business Registration Listing
  1150. ****************************************************
  1151. Copy and paste the link below to view additional details:
  1152. http://who.godaddy.com/whoischeck.aspx?domain=JIHADICA.COM
  1153.  
  1154. ___ ______ _________ ___ _______
  1155. | _ \__ /\ \ / /__ / _ \/ __|__ / \
  1156. | /|_ \ \ V / |_ \ /\__ \|_ \ |) |
  1157. |_|_\___/ \_/_|___/_|_\|___/___/___/
  1158. / __| __/ __|
  1159. \__ \ _| (__
  1160. |___/___\___|
  1161.  
  1162. ____________________________________________
  1163. | Auto Footprint Tool |
  1164. | By: Y0urN3w0wn3r |
  1165. | www.ReversedSec.com |
  1166. |____________________________________________|
  1167. ____________________________________
  1168. | NSHELP RESULTS FOR |
  1169. | shahamat-english.com |
  1170. |____________________________________|
  1171. Server: 8.8.8.8
  1172. Address: 8.8.8.8#53
  1173.  
  1174. Non-authoritative answer:
  1175. Name: shahamat-english.com
  1176. Address: 172.96.184.164
  1177.  
  1178. Server: 8.8.8.8
  1179. Address: 8.8.8.8#53
  1180.  
  1181. Non-authoritative answer:
  1182. shahamat-english.com mail exchanger = 0 shahamat-english.com.
  1183.  
  1184. Authoritative answers can be found from:
  1185. shahamat-english.com nameserver = ns1.hawkhost.com.
  1186. shahamat-english.com nameserver = ns2.hawkhost.com.
  1187. shahamat-english.com internet address = 172.96.184.164
  1188. ns1.hawkhost.com internet address = 198.252.96.100
  1189. ns2.hawkhost.com internet address = 198.252.97.100
  1190.  
  1191. Server: 8.8.8.8
  1192. Address: 8.8.8.8#53
  1193.  
  1194. Non-authoritative answer:
  1195. shahamat-english.com
  1196. origin = ns1.hawkhost.com
  1197. mail addr = server.hawkhost.com
  1198. serial = 2017120803
  1199. refresh = 86400
  1200. retry = 7200
  1201. expire = 2419200
  1202. minimum = 86400
  1203.  
  1204. Authoritative answers can be found from:
  1205. shahamat-english.com nameserver = ns2.hawkhost.com.
  1206. shahamat-english.com nameserver = ns1.hawkhost.com.
  1207. ns1.hawkhost.com internet address = 198.252.96.100
  1208. ns2.hawkhost.com internet address = 198.252.97.100
  1209.  
  1210. Server: 8.8.8.8
  1211. Address: 8.8.8.8#53
  1212.  
  1213. Non-authoritative answer:
  1214. shahamat-english.com nameserver = ns1.hawkhost.com.
  1215. shahamat-english.com nameserver = ns2.hawkhost.com.
  1216.  
  1217. Authoritative answers can be found from:
  1218. ns1.hawkhost.com internet address = 198.252.96.100
  1219. ns2.hawkhost.com internet address = 198.252.97.100
  1220.  
  1221.  
  1222. Starting Nmap 7.60 ( https://nmap.org ) at 2018-02-12 16:52 CST
  1223. Initiating Ping Scan at 16:52
  1224. Scanning shahamat-english.com (172.96.184.164) [4 ports]
  1225. Completed Ping Scan at 16:52, 0.42s elapsed (1 total hosts)
  1226. Initiating Parallel DNS resolution of 1 host. at 16:52
  1227. Completed Parallel DNS resolution of 1 host. at 16:52, 0.33s elapsed
  1228. Initiating SYN Stealth Scan at 16:52
  1229. Scanning shahamat-english.com (172.96.184.164) [1000 ports]
  1230. Discovered open port 53/tcp on 172.96.184.164
  1231. Discovered open port 80/tcp on 172.96.184.164
  1232. Discovered open port 993/tcp on 172.96.184.164
  1233. Discovered open port 587/tcp on 172.96.184.164
  1234. Discovered open port 110/tcp on 172.96.184.164
  1235. Discovered open port 443/tcp on 172.96.184.164
  1236. Discovered open port 21/tcp on 172.96.184.164
  1237. Discovered open port 995/tcp on 172.96.184.164
  1238. Discovered open port 22/tcp on 172.96.184.164
  1239. Discovered open port 143/tcp on 172.96.184.164
  1240. Discovered open port 465/tcp on 172.96.184.164
  1241. SYN Stealth Scan Timing: About 35.20% done; ETC: 16:54 (0:00:57 remaining)
  1242. Increasing send delay for 172.96.184.164 from 0 to 5 due to 26 out of 86 dropped probes since last increase.
  1243. Increasing send delay for 172.96.184.164 from 5 to 10 due to 11 out of 23 dropped probes since last increase.
  1244. Increasing send delay for 172.96.184.164 from 10 to 20 due to 11 out of 16 dropped probes since last increase.
  1245. SYN Stealth Scan Timing: About 58.34% done; ETC: 16:55 (0:01:05 remaining)
  1246. Increasing send delay for 172.96.184.164 from 20 to 40 due to 11 out of 23 dropped probes since last increase.
  1247. Increasing send delay for 172.96.184.164 from 40 to 80 due to 11 out of 25 dropped probes since last increase.
  1248. SYN Stealth Scan Timing: About 73.46% done; ETC: 16:56 (0:00:57 remaining)
  1249. Increasing send delay for 172.96.184.164 from 80 to 160 due to 15 out of 49 dropped probes since last increase.
  1250. Discovered open port 26/tcp on 172.96.184.164
  1251. -----HOSTNAME HISTORY REPORT------
  1252. DNS Status:
  1253. A | 172.96.184.164
  1254. NS | ns2.hawkhost.com
  1255. NS | ns1.hawkhost.com
  1256. MX | shahamat-english.com
  1257. Subdomain Bruteforce:
  1258. www.shahamat-english.com | 172.96.184.164
  1259. mail.shahamat-english.com | 172.96.184.164
  1260. cpanel.shahamat-english.com | 172.96.184.164
  1261. ftp.shahamat-english.com | 172.96.184.164
  1262. webmail.shahamat-english.com | 172.96.184.164
  1263. Domain History
  1264. 172.96.184.164
  1265. 198.143.149.154
  1266. 72.52.4.119
  1267. 50.63.202.58
  1268. 209.99.40.223
  1269. 104.24.24.18
  1270. 104.31.82.171
  1271. 141.101.125.254
  1272. 198.41.206.148
  1273. 104.28.2.74
  1274. 104.28.3.74
  1275. 104.28.2.74
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement