malware-guide.com - dns.ninja

malware-guide.com

DNSSEC⚠️ Not signed
A2606:4700:3036::ac43:cf69🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:4566🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.69.102Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.207.105🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSgina.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a75🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgina.ns.cloudflare.com
A2803:f800:50::6ca2:c075🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgina.ns.cloudflare.com
A2a06:98c1:50::ac40:2075🇺🇸 Cloudflare2a06:98c1:50::/45
PTRgina.ns.cloudflare.com
A108.162.192.117🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgina.ns.cloudflare.com
A172.64.32.117🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgina.ns.cloudflare.com
A173.245.58.117🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgina.ns.cloudflare.com
NSphil.ns.cloudflare.com
A2606:4700:58::adf5:3b89🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A2803:f800:50::6ca2:c189🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRphil.ns.cloudflare.com
A2a06:98c1:50::ac40:2189🇺🇸 Cloudflare2a06:98c1:50::/45
PTRphil.ns.cloudflare.com
A108.162.193.137🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A172.64.33.137🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
A173.245.59.137🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphil.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.69.102, 172.67.207.105
IPv6 hints2606:4700:3036::ac43:cf69, 2606:4700:3037::6815:4566
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=132, name=cloudflare-ech.com
SOAgina.ns.cloudflare.comdns@cloudflare.com serial=2410061277

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1785688977

Same first word

malware-guide.com

DNS History

18 records (6 active, 12 former)

202120222023202420252026NSgina.ns.cloudflare.comphil.ns.cloudflare.combrenda.ns.cloudflare.comdamon.ns.cloudflare.comA104.21.69.102172.67.207.1052606:4700:3036::ac43:cf692606:4700:3037::6815:4566104.18.50.238104.18.51.238104.21.42.115172.67.161.1682606:4700:3032::6815:45662606:4700:3032::ac43:a1a82606:4700:3034::ac43:cf692606:4700:3035::6812:32ee2606:4700:3035::6812:33ee2606:4700:3037::6815:2a73
○NSbrenda.ns.cloudflare.com2020-03-22 → 2021-05-14 · 4 obs
● 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
○NSdamon.ns.cloudflare.com2020-03-22 → 2021-05-14 · 4 obs
● 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
●NSgina.ns.cloudflare.com2026-02-14 → 2026-08-02 · 3 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-08-02 17:00:14
●NSphil.ns.cloudflare.com2026-02-14 → 2026-08-02 · 3 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-08-02 17:00:14
○A104.18.50.2382020-03-22 → 2020-03-22 · 3 obs
● 2020-03-22 03:54:52
○ 2021-05-14 21:32:46
○ 2026-08-02 17:00:14
○A104.18.51.2382020-03-22 → 2020-03-22 · 3 obs
● 2020-03-22 03:54:52
○ 2021-05-14 21:32:46
○ 2026-08-02 17:00:14
○A104.21.42.1152021-05-14 → 2021-05-14 · 4 obs
○ 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
●A104.21.69.1022026-02-14 → 2026-08-02 · 3 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-08-02 17:00:14
○A172.67.161.1682021-05-14 → 2021-05-14 · 4 obs
○ 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
●A172.67.207.1052026-02-14 → 2026-08-02 · 3 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-08-02 17:00:14
○A2606:4700:3032::6815:45662026-02-14 → 2026-06-15 · 5 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-06-15 02:51:48
○ 2026-06-23 00:59:52
○ 2026-08-02 17:00:14
○A2606:4700:3032::ac43:a1a82021-05-14 → 2021-05-14 · 4 obs
○ 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
○A2606:4700:3034::ac43:cf692026-02-14 → 2026-06-15 · 5 obs
○ 2021-05-14 21:32:46
● 2026-02-14 19:06:04
● 2026-06-15 02:51:48
○ 2026-06-23 00:59:52
○ 2026-08-02 17:00:14
○A2606:4700:3035::6812:32ee2020-03-22 → 2020-03-22 · 3 obs
● 2020-03-22 03:54:52
○ 2021-05-14 21:32:46
○ 2026-08-02 17:00:14
○A2606:4700:3035::6812:33ee2020-03-22 → 2020-03-22 · 3 obs
● 2020-03-22 03:54:52
○ 2021-05-14 21:32:46
○ 2026-08-02 17:00:14
●A2606:4700:3036::ac43:cf692026-06-23 → 2026-08-02 · 3 obs
○ 2026-06-15 02:51:48
● 2026-06-23 00:59:52
● 2026-08-02 17:00:14
○A2606:4700:3037::6815:2a732021-05-14 → 2021-05-14 · 4 obs
○ 2020-03-22 03:54:52
● 2021-05-14 21:32:46
○ 2026-02-14 19:06:04
○ 2026-08-02 17:00:14
●A2606:4700:3037::6815:45662026-06-23 → 2026-08-02 · 3 obs
○ 2026-06-15 02:51:48
● 2026-06-23 00:59:52
● 2026-08-02 17:00:14

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
comm.gtld-servers.net, k.gtld-servers.net, j.gtld-servers.net, a.gtld-servers.net...-
malware-guide.comgina.ns.cloudflare.com, phil.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.193.137

NS records: gina.ns.cloudflare.com, phil.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malware-guide.com (unsigned zone)

⏱️ Timing

Total: 134ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.69.102, 172.67.207.105
AAAA22606:4700:3037::6815:4566, 2606:4700:3036::ac43:cf69
NS2gina.ns.cloudflare.com, phil.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1gina.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (gina.ns.cloudflare.com, gina.ns.cloudflare.com, gina.ns.cloudflare.com...)

Analysis

IP Addresses

malware-guide.com directs to four IP numbers, which are 104.21.69.102, 172.67.207.105, 2606:4700:3036::ac43:cf69 and 2606:4700:3037::6815:4566.

kupony-skidki.ru, www.kirche-lennep.de, salescloud.is plus two other host names have IP numbers in common with malware-guide.com.

Name Servers

The NS records for malware-guide.com delegate to gina.ns.cloudflare.com and phil.ns.cloudflare.com.

The name server configuration of malware-guide.com is shared with other domains, for instance verygoodbars.com, ice-fx.com, phucyen.net and two others.

There is at least partial name server overlap between malware-guide.com and other domains — bestsoffitpros.com, hoteljaime.com, gaiazoo.com and two more among them.

These name servers tend to appear in combination with the name servers jim.ns.cloudflare.com, anderson.ns.cloudflare.com, pablo.ns.cloudflare.com and dave.ns.cloudflare.com.

Hosts with 6 IP addresses each:

gina.ns.cloudflare.com maps to 108.162.192.117, 172.64.32.117, 173.245.58.117 and 3 additional IP addresses.

phil.ns.cloudflare.com maps to 108.162.193.137, 172.64.33.137, 173.245.59.137 and 3 additional IP addresses.