attacker.tv
Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .
OfflineFamily DNS blockedSSL: 49 days left7 years old
25
attacker.tv was registered on 3 Aug 2019 via NameCheap, Inc. and the registry expiry is 3 Aug 2027. WHOIS data came from RDAP at https://rdap.nic.tv/domain/attacker.tv.
attacker.tv publishes 2 nameservers. DNSSEC is not signed.
attacker.tv has 1 IPv4 address (162.4.84.240). The geolocation database places 162.4.84.240 in Los Angeles, United States.
The TLS certificate from YE1 is not valid (TLS 1.3).
Domain · RDAP/WHOIS
attacker.tv was registered on 3 Aug 2019 via NameCheap, Inc.. The registry returned 1 status value and 2 nameservers from https://rdap.nic.tv/domain/attacker.tv.
| Registered | since 3 Aug 2019 |
|---|---|
| Created | 3 August 2019 |
| Updated | 22 August 2026 |
| Expires | 3 August 2027 |
| Registrar | NameCheap, Inc. |
| Status | client transfer prohibited |
| Nameservers | ns1.kefuhw.parklogic.com, ns2.kefuhw.parklogic.com |
| DNSSEC | no |
| Source | https://rdap.nic.tv/domain/attacker.tv |
attacker.tv carries the status "client transfer prohibited". The registrar has asked the registry to refuse a transfer to another registrar. The status is a lock on the domain object. It is not evidence about the content of the site.
Nameserver ns1.kefuhw.parklogic.com is published for attacker.tv in the registration record from https://rdap.nic.tv/domain/attacker.tv.
Nameserver ns2.kefuhw.parklogic.com is published for attacker.tv in the registration record from https://rdap.nic.tv/domain/attacker.tv.
DNS
attacker.tv has 1 address record, 1 mail exchanger and 2 nameservers, measured at 1.1.1.1:53.
| A | 162.4.84.240 |
|---|---|
| AAAA | — |
| NS | ns1.kefuhw.parklogic.com, ns2.kefuhw.parklogic.com |
| MX | mx156.hostedmxserver.com (10) |
| SPF | present |
| DMARC | absent |
| CAA | issue letsencrypt.org |
| Wildcard | on |
| DNSSEC | not signed |
| Resolver | 1.1.1.1:53 |
The SPF text record at attacker.tv is "v=spf1 -all".
IPv4 address 162.4.84.240 answers for attacker.tv at resolver 1.1.1.1:53.
Mail exchanger mx156.hostedmxserver.com has preference 10.
A random label under attacker.tv also resolved, which means wildcard DNS is on.
A nameserver belongs to a parking host.
Hosting and geo
attacker.tv is placed in Los Angeles, United States by the local geolocation database (db-ip).
| Address | 162.4.84.240 |
|---|---|
| Country | United States |
| City | Los Angeles |
| Source | db-ip |
SSL/TLS
The certificate for attacker.tv is not valid, with 49 days left and 1 subject alternative name. Source: tls:443.
| Issuer | YE1 |
|---|---|
| Subject | attacker.tv |
| Valid from | 20 September 2026 |
| Valid until | 19 December 2026 |
| Days left | 49 |
| SAN count | 1 |
| Protocol | TLS 1.3 |
| Source | tls:443 |
Subject alternative names: attacker.tv.
Validation result: certificate did not validate
Tech stack
Tech detection did not run.
| Checked | no |
|---|---|
| Source | wappalyzergo |
On-page checks
The homepage fetch did not return a status code.
| Status | none |
|---|
Get "https://attacker.tv/": tls: failed to verify certificate: x509: certificate signed by unknown authority
Security
Family DNS for attacker.tv is blocked, and URLhaus is clear. Source: family DNS and local lists.
| Family DNS | blocked |
|---|---|
| URLhaus | clear |
| UT1 | — |
| Web Risk | not run |
| Source | family DNS and local lists |
| HSTS | no |
| CSP | no |
Cloudflare family DNS returned a block for attacker.tv. That resolver covers adult and malware names.
Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.
Score breakdown
Availability 10 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.
TLS 0 of 20. A valid certificate, with extra points when it has at least 14 days left.
DNS hygiene 10 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.
Security headers 0 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.
Safety lists 0 of 15. Points only when the checks ran and came back clean. Unknown is not clean.
Domain age 5 of 5. Five points at one year, two points at 30 days.
Change history
- October 2026: rdap created changed from empty to 2019-08-03T02:45:38Z.
- October 2026: rdap dnssec changed from empty to no.
- October 2026: rdap expires changed from empty to 2027-08-03T02:45:38Z.
- October 2026: rdap nameservers changed from empty to ns1.kefuhw.parklogic.com,ns2.kefuhw.parklogic.com.
- October 2026: rdap registered changed from unknown to yes.
- October 2026: rdap registrar changed from empty to NameCheap, Inc..
- October 2026: rdap statuses changed from empty to client transfer prohibited.
- October 2026: rdap updated changed from empty to 2026-08-22T16:16:17Z.
- October 2026: geo city changed from empty to Los Angeles.
- October 2026: geo country changed from empty to United States.
Questions
Is attacker.tv safe?
Cloudflare family DNS returned a block for attacker.tv. That resolver covers adult and malware names.
Who hosts attacker.tv?
attacker.tv is placed in Los Angeles, United States.
When does attacker.tv expire?
attacker.tv expires on 3 August 2027 according to https://rdap.nic.tv/domain/attacker.tv.
Who owns attacker.tv?
The registry did not return a person or a company for attacker.tv. RDAP often redacts the registrant. The registrar on file is NameCheap, Inc..
Sources
- RDAP source https://rdap.nic.tv/domain/attacker.tv at 2026-10-30T15:28:17Z
- DNS source 1.1.1.1:53 at 2026-10-30T15:28:17Z
- TLS source tls:443 at 2026-10-30T15:28:17Z
- HTTP source https://attacker.tv/ at 2026-10-30T15:28:17Z
- Tech source not available at 2026-10-30T15:28:17Z
- Geo source db-ip at 2026-10-30T15:28:17Z
- Safety source family DNS and local lists at 2026-10-30T15:28:17Z
Related reports
No other indexable reports share this TLD, host, or registrar yet.
Owner of this site?
Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.
How to read this report
The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.