Skip to content

Domains Networks Brands Infrastructure Signals Warnings Jurisdictions About Report

ScamDOX

Forensic intelligence platform identifying and exposing networks of linked fraudulent broker platforms through infrastructure correlation and content analysis.

Independent research project — not legal or financial advice.

Database

Domains Brands Networks Infrastructure Signals Warnings Jurisdictions

Platform

About Report a scam RSS Feed

Shortcuts

Ctrl+KSearch

ESCClose

© 2026 ScamDOXExposing fraud networks since 2025

104.21.51.252 — IP Infrastructure Profile | ScamDOX

HOME/INFRASTRUCTURE/IP/104.21.51.252

IP

IPv4 104.21.51.252

104.21.51.252

Connected scam domains

1

Related entities

10

First observed

May 27, 2026

Last observed

May 27, 2026

Connected Scam Domains (1)

DomainBrandNetworkStatusFirst seen

nextrendsolution.com

NexcresVelvet ForgeactiveMay 2026

Related Infrastructure

Other infrastructure entities that share domain connections with this ip.

Nameservers

ruben.ns.cloudflare.com1 shared

SOA primary NS: gracie.ns.cloudflare.com1 shared

emails

SOA hostmaster: dns@cloudflare.com1 shared

ssl_certs

WE11 shared

Cloudflare NS Pairs

CF NS: gracie + ruben1 shared

Have information about this infrastructure?

Your report helps us track and expose these operations.

Mail Servers

premium205.web-hosting.com1 shared

domains

SPF include: spf.web-hosting.com1 shared

IPs

IPv6 2606:4700:3037::ac43:c0841 shared

IPv6 2606:4700:3033::6815:33fc1 shared

IPv4 172.67.192.1321 shared