r.xyz Threat Intelligence and Information

Host Location

Dig Results

• Got answer:
• -»HEADER«- opcode: QUERY, status: NOERROR, id: 65060
• flags: qr rd ra ad QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
• OPT PSEUDOSECTION:
• EDNS: version: 0, flags: udp: 1432
• QUESTION SECTION:
• r.xyz. IN A
• ANSWER SECTION:
• r.xyz. 298 IN A 172.66.145.99
• r.xyz. 298 IN A 104.20.46.84
• Query time: 0 msec
• SERVER: 192.168.1.153(192.168.1.1) (UDP)
• WHEN: Sat Aug 23 00:07:00 UTC 2025
• MSG SIZE rcvd: 66

Whois Data

• Domain Name: R.XYZ
• Registry Domain ID: D355974090-CNIC
• Registrar URL: https://www.godaddy.com/
• Updated Date: 2025-06-24T16:06:36.0Z
• Creation Date: 2023-03-24T16:44:02.0Z
• Registry Expiry Date: 2026-03-24T23:59:59.0Z
• Registrar: Go Daddy, LLC
• Registrar IANA ID: 146
• Name Server: JOHNNY.NS.CLOUDFLARE.COM
• Name Server: MAXINE.NS.CLOUDFLARE.COM
• DNSSEC: signedDelegation
• Registrar Abuse Contact Email: abuse@godaddy.com
• Registrar Abuse Contact Phone: +1.4805058800
• https://www.centralnicregistry.com/support/information/rdap «<
• blacklisted. All data is (c) CentralNic Ltd (https://www.centralnicregistry.com)

SSL Certificate Information

• Certificate:
• Data:
• Version: 3 (0x2)
• Serial Number:
• 66:79:d7:66:6e:15:21:f3:0d:19:bf:50:38:e5:60:54
• Signature Algorithm: ecdsa-with-SHA256
• Issuer: C = US, O = Google Trust Services, CN = WE1
• Validity
• Not Before: Jul 8 01:41:08 2025 GMT
• Not After : Oct 6 02:41:03 2025 GMT
• Subject: CN = r.xyz
• Subject Public Key Info:
• Public Key Algorithm: id-ecPublicKey
• Public-Key: (256 bit)
• pub:
• 04:74:d8:8a:c6:e3:87:51:52:e0:dc:f4:8e:4b:5d:
• 2c:69:75:ff:a3:c9:9c:b8:77:cc:37:40:3c:6c:88:
• eb:95:1f:e8:bb:ee:81:a1:21:0a:64:c9:08:d9:1a:
• 3a:06:2c:0f:ae:81:ae:61:86:d6:05:53:88:9f:9e:
• 07:b0:f6:b6:ad
• ASN1 OID: prime256v1
• NIST CURVE: P-256
• X509v3 extensions:
• X509v3 Key Usage: critical
• Digital Signature
• X509v3 Extended Key Usage:
• TLS Web Server Authentication
• X509v3 Basic Constraints: critical
• CA:FALSE
• X509v3 Subject Key Identifier:
• 4C:66:34:82:84:8A:89:3F:A9:61:4E:63:07:89:37:41:D0:F4:CB:BF
• X509v3 Authority Key Identifier:
• 90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
• Authority Information Access:
• OCSP - URI:http://o.pki.goog/s/we1/Znk
• CA Issuers - URI:http://i.pki.goog/we1.crt
• X509v3 Subject Alternative Name:
• DNS:r.xyz, DNS:*.r.xyz
• X509v3 Certificate Policies:
• Policy: 2.23.140.1.2.1
• X509v3 CRL Distribution Points:
• Full Name:
• URI:http://c.pki.goog/we1/ygWPENklvpM.crl
• CT Precertificate SCTs:
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
• F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
• Timestamp : Jul 8 02:41:09.454 2025 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:46:02:21:00:AA:FC:DB:E6:6F:BA:B8:18:A0:8E:64:
• 15:3C:38:21:67:D4:94:80:38:A5:E8:D8:C1:8F:16:7A:
• 3F:E5:78:22:3C:02:21:00:EA:64:8C:C5:B0:E7:6D:24:
• 3E:EB:00:67:22:4F:4E:98:D7:A3:2C:92:2F:1A:E5:93:
• 8A:6B:55:03:7F:48:7A:20
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
• 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
• Timestamp : Jul 8 02:41:09.472 2025 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:44:02:20:75:46:B0:32:F2:96:F6:20:C6:E3:7E:DE:
• D0:6E:80:DB:4F:3E:64:80:41:87:F2:02:BA:7B:38:E8:
• D6:0E:85:18:02:20:74:EC:BB:72:2F:3A:E8:7D:16:B9:
• 42:EE:DD:64:BC:78:6D:97:6C:71:39:F3:FE:C9:21:09:
• 1C:71:F6:13:09:8C
• Signature Algorithm: ecdsa-with-SHA256
• Signature Value:
• 30:45:02:20:14:07:06:0b:6f:ee:7d:17:a4:49:1d:a7:17:e2:
• 59:5f:ce:40:f2:90:f0:24:23:a6:9a:93:27:77:b6:93:20:87:
• 02:21:00:af:31:5c:ef:8a:ce:a5:b7:5d:f9:59:0e:d1:d2:b4:
• f8:41:00:7b:ea:ec:e5:ac:3d:c3:93:30:82:ab:f0:32:d4

Additional Links

*** Virustotal ***

*** WayBackMachine ***