Skip to content

Domains Networks Brands Infrastructure Signals Warnings Jurisdictions About Report

ScamDOX

Forensic intelligence platform identifying and exposing networks of linked fraudulent broker platforms through infrastructure correlation and content analysis.

Independent research project — not legal or financial advice.

Database

Domains Brands Networks Infrastructure Signals Warnings Jurisdictions

Platform

About Report a scam RSS Feed

Shortcuts

Ctrl+KSearch

ESCClose

© 2026 ScamDOXExposing fraud networks since 2025

104.21.13.192 — IP Infrastructure Profile | ScamDOX

HOME/INFRASTRUCTURE/IP/104.21.13.192

IP

IPv4 104.21.13.192

104.21.13.192

Connected scam domains

1

Related entities

12

First observed

May 27, 2026

Last observed

May 27, 2026

Connected Scam Domains (1)

DomainBrandNetworkStatusFirst seen

Nexus PipObsidian TalonactiveMay 2026

Related Infrastructure

Other infrastructure entities that share domain connections with this ip.

domains

SPF include: zohomail.com1 shared

ssl_certs

WE11 shared

emails

SOA hostmaster: dns@cloudflare.com1 shared

Mail Servers

mx3.zoho.com1 shared

mx2.zoho.com1 shared

Have information about this infrastructure?

Your report helps us track and expose these operations.

1 shared

IPs

IPv4 172.67.133.191 shared

IPv6 2606:4700:3036::6815:dc01 shared

IPv6 2606:4700:3032::ac43:85131 shared

Nameservers

treasure.ns.cloudflare.com1 shared

ken.ns.cloudflare.com1 shared

Cloudflare NS Pairs

CF NS: ken + treasure1 shared