Skip to content

Domains Networks Brands Infrastructure Signals Warnings Jurisdictions About Report

ScamDOX

Forensic intelligence platform identifying and exposing networks of linked fraudulent broker platforms through infrastructure correlation and content analysis.

Independent research project — not legal or financial advice.

Database

Domains Brands Networks Infrastructure Signals Warnings Jurisdictions

Platform

About Report a scam RSS Feed

Shortcuts

Ctrl+KSearch

ESCClose

© 2026 ScamDOXExposing fraud networks since 2025

104.21.20.5 — IP Infrastructure Profile | ScamDOX

HOME/INFRASTRUCTURE/IP/104.21.20.5

IP

IPv4 104.21.20.5

104.21.20.5

Connected scam domains

1

Related entities

15

First observed

May 27, 2026

Last observed

May 27, 2026

Connected Scam Domains (1)

DomainBrandNetworkStatusFirst seen

—Velvet MirageactiveMay 2026

Related Infrastructure

Other infrastructure entities that share domain connections with this ip.

emails

SOA hostmaster: dns@cloudflare.com1 shared

domains

SPF include: _spf.google.com1 shared

Nameservers

SOA primary NS: irena.ns.cloudflare.com1 shared

SOA primary NS: ian.ns.cloudflare.com1 shared

verification_codes

google-site-verification=UKtEKqwaPMJtOuyZLB9wJkhVyUNLViouAh1

Have information about this infrastructure?

Your report helps us track and expose these operations.

1 shared

Mail Servers

alt3.aspmx.l.google.com1 shared

alt2.aspmx.l.google.com1 shared

alt1.aspmx.l.google.com1 shared

alt4.aspmx.l.google.com1 shared

aspmx.l.google.com1 shared

IPs

IPv6 2606:4700:3032::6815:14051 shared

IPv4 172.67.190.1891 shared

IPv6 2606:4700:3034::ac43:bebd1 shared

Cloudflare NS Pairs

CF NS: ian + irena1 shared

ssl_certs

WE11 shared