maliciousserver.com - dns.ninja

`maliciousserver.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:9a8c^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:48c2^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.72.194^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.154.140^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`paityn.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2612^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c212^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`paityn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2212^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`paityn.ns.cloudflare.com`
		A	108.162.194.18^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	162.159.38.18^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	172.64.34.18^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
NS	`vasilii.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c1a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c31a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`vasilii.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:231a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`vasilii.ns.cloudflare.com`
		A	108.162.195.26^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	162.159.44.26^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
		A	172.64.35.26^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`vasilii.ns.cloudflare.com`
TXT	`protonmail-verification=7f8415a9d21d8d39443791689d676d2322a7d7d2`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.72.194, 172.67.154.140
		IPv6 hints	2606:4700:3031::ac43:9a8c, 2606:4700:3035::6815:48c2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=137, name=cloudflare-ech.com
SOA	`paityn.ns.cloudflare.com`dns@cloudflare.com serial=2407688198

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784982237

Previously MX for

maliciousserver.com

Same first word

maliciousserver.com

Similar names

servicesolarium.com

ourmailservices.com

solariumservice.de

solariumservice.com

solariumservice.ch

DNS History

18 records (6 active, 12 former)

○NSns1.digitalocean.com2016-01-28 → 2017-05-27 · 5 obs

○ 2015-11-04 04:57:26
● 2016-01-28 12:19:42
● 2017-05-27 03:13:06
○ 2026-03-13 21:25:24
○ 2026-07-25 12:25:40

○NSns2.digitalocean.com2016-01-28 → 2017-05-27 · 5 obs

○ 2015-11-04 04:57:26
● 2016-01-28 12:19:42
● 2017-05-27 03:13:06
○ 2026-03-13 21:25:24
○ 2026-07-25 12:25:40

○NSns3.digitalocean.com2016-01-28 → 2017-05-27 · 5 obs

○ 2015-11-04 04:57:26
● 2016-01-28 12:19:42
● 2017-05-27 03:13:06
○ 2026-03-13 21:25:24
○ 2026-07-25 12:25:40

○NSns73.domaincontrol.com2015-06-26 → 2015-11-04 · 4 obs

● 2015-06-26 16:53:40
● 2015-11-04 04:57:26
○ 2016-01-28 12:19:42
○ 2026-07-25 12:25:40

○NSns74.domaincontrol.com2015-06-26 → 2015-11-04 · 4 obs

● 2015-06-26 16:53:40
● 2015-11-04 04:57:26
○ 2016-01-28 12:19:42
○ 2026-07-25 12:25:40

●NSpaityn.ns.cloudflare.com2026-03-13 → 2026-07-25 · 3 obs

○ 2017-05-27 03:13:06
● 2026-03-13 21:25:24
● 2026-07-25 12:25:40

●NSvasilii.ns.cloudflare.com2026-03-13 → 2026-07-25 · 3 obs

○ 2017-05-27 03:13:06
● 2026-03-13 21:25:24
● 2026-07-25 12:25:40

○MXmaliciousserver.com2015-06-26 → 2015-11-04 · 4 obs

● 2015-06-26 16:53:40
● 2015-11-04 04:57:26
○ 2016-01-28 12:19:42
○ 2026-07-25 12:25:40

●A104.21.72.1942026-03-13 → 2026-07-25 · 16 obs

○ 2017-05-27 03:13:06
● 2026-03-13 21:25:24
● 2026-03-30 19:27:42
○ 2026-04-04 07:05:56
● 2026-04-08 22:54:48
● 2026-04-20 13:52:34
○ 2026-04-21 21:32:00
○ 2026-04-21 23:29:16
● 2026-04-23 02:39:04
● 2026-04-30 07:01:14
○ 2026-05-03 12:21:00
● 2026-05-07 05:09:08
● 2026-05-15 16:49:28
○ 2026-05-16 01:20:48
● 2026-05-24 04:18:00
● 2026-07-25 12:25:40

●A172.67.154.1402026-03-13 → 2026-07-25 · 16 obs

○A188.114.96.02026-04-04 → 2026-05-16 · 15 obs

○ 2026-03-13 21:25:24
○ 2026-03-30 19:27:42
● 2026-04-04 07:05:56
○ 2026-04-08 22:54:48
○ 2026-04-20 13:52:34
● 2026-04-21 21:32:00
● 2026-04-21 23:29:16
○ 2026-04-23 02:39:04
○ 2026-04-30 07:01:14
● 2026-05-03 12:21:00
○ 2026-05-07 05:09:08
○ 2026-05-15 16:49:28
● 2026-05-16 01:20:48
○ 2026-05-24 04:18:00
○ 2026-07-25 12:25:40

○A188.114.97.02026-04-04 → 2026-05-16 · 15 obs

○A192.241.235.182015-06-26 → 2017-05-27 · 4 obs

● 2015-06-26 16:53:40
● 2017-05-27 03:13:06
○ 2026-03-13 21:25:24
○ 2026-07-25 12:25:40

●A2606:4700:3031::ac43:9a8c2026-06-25 → 2026-07-25 · 3 obs

○ 2026-06-06 22:21:44
● 2026-06-25 12:12:58
● 2026-07-25 12:25:40

●A2606:4700:3035::6815:48c22026-03-17 → 2026-07-25 · 15 obs

○ 2026-03-13 21:25:24
● 2026-03-17 08:40:28
● 2026-03-30 19:27:42
○ 2026-04-04 07:05:56
● 2026-04-08 22:54:48
● 2026-04-21 21:32:00
○ 2026-04-21 23:29:16
● 2026-04-23 02:39:04
● 2026-04-30 07:01:14
○ 2026-05-03 12:21:00
● 2026-05-07 05:09:08
● 2026-05-15 16:49:28
○ 2026-05-16 01:20:48
● 2026-05-24 04:18:00
● 2026-07-25 12:25:40

○A2606:4700:3036::ac43:9a8c2026-03-17 → 2026-06-06 · 17 obs

○A2a06:98c1:3120::2026-03-13 → 2026-05-16 · 16 obs

○ 2017-05-27 03:13:06
● 2026-03-13 21:25:24
○ 2026-03-17 08:40:28
○ 2026-03-30 19:27:42
● 2026-04-04 07:05:56
○ 2026-04-08 22:54:48
○ 2026-04-21 21:32:00
● 2026-04-21 23:29:16
○ 2026-04-23 02:39:04
○ 2026-04-30 07:01:14
● 2026-05-03 12:21:00
○ 2026-05-07 05:09:08
○ 2026-05-15 16:49:28
● 2026-05-16 01:20:48
○ 2026-05-24 04:18:00
○ 2026-07-25 12:25:40

○A2a06:98c1:3121::2026-03-13 → 2026-05-16 · 16 obs

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
maliciousserver.com	paityn.ns.cloudflare.com, vasilii.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.26

NS records: paityn.ns.cloudflare.com, vasilii.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for maliciousserver.com (unsigned zone)

⏱️ Timing

Total: 154ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.154.140, 104.21.72.194`
AAAA	2	`2606:4700:3031::ac43:9a8c, 2606:4700:3035::6815:48c2`
NS	2	`paityn.ns.cloudflare.com, vasilii.ns.cloudflare.com`
TXT	1	`protonmail-verification=7f8415a9d21d8d39`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`paityn.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (paityn.ns.cloudflare.com, paityn.ns.cloudflare.com, paityn.ns.cloudflare.com...)

Analysis

IP Addresses

maliciousserver.com has four IP addresses: 104.21.72.194, 172.67.154.140, 2606:4700:3031::ac43:9a8c and 2606:4700:3035::6815:48c2.

Two other host names, along with hotest.eu.org, parksleepflyhotels.com and pgrotary.net, also share IP numbers with maliciousserver.com.

Name Servers

maliciousserver.com is served by two delegated name servers, paityn.ns.cloudflare.com and vasilii.ns.cloudflare.com.

maliciousserver.com shares its NS records with other domains, for example socslugba.ru, jasmithco.com, atlaschain.ru and two others.

maliciousserver.com shares at least some of its name servers with other domains, including tarnuvexia.my, hetericstack.click, alliancedeltapattern.sbs and two others.

These name servers are frequently paired with the name servers meiling.ns.cloudflare.com, ajay.ns.cloudflare.com and pam.ns.cloudflare.com.

DNS names with 6 IP addresses:

paityn.ns.cloudflare.com carries IP addresses 108.162.194.18, 162.159.38.18 and 172.64.34.18, with 3 other addresses beyond those.

vasilii.ns.cloudflare.com carries IP addresses 108.162.195.26, 162.159.44.26 and 172.64.35.26, with 3 other addresses beyond those.