malwarefox.com - dns.ninja

`malwarefox.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:ab1^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:9228^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.10.177^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.146.40^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`christian.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cf7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`christian.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3f7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`christian.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23f7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`christian.ns.cloudflare.com`
		A	108.162.195.247^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`christian.ns.cloudflare.com`
		A	162.159.44.247^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`christian.ns.cloudflare.com`
		A	172.64.35.247^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`christian.ns.cloudflare.com`
NS	`jocelyn.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aae^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0ae^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jocelyn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20ae^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jocelyn.ns.cloudflare.com`
		A	108.162.192.174^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	172.64.32.174^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
		A	173.245.58.174^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jocelyn.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c29::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`yuiadum-in-f27.1e100.net`
		A	142.251.111.26^{🇺🇸 Google142.251.111.0/24}
			PTR	`bk-in-f26.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.26^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.27^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f27.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1a^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f26.1e100.net`
		A	192.178.223.27^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1a^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f26.1e100.net`
		A	172.253.157.27^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f27.1e100.net`
TXT	`google-site-verification=yD9DvWb8w62QYA0RamVa2ZcmNDWTTBAs0fvyaYV07lg`
TXT	`v=spf1 a mx a:malwarefox.com ip4:67.202.92.9 ip4:208.100.34.142 ip4:198.60.19...`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.10.177, 172.67.146.40
		IPv6 hints	2606:4700:3033::6815:ab1, 2606:4700:3034::ac43:9228
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=179, name=cloudflare-ech.com
SOA	`christian.ns.cloudflare.com`dns@cloudflare.com serial=2410359227

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785359587

rank #383096 globally
rank #157877 in the tld
WOT: SAFE (49/100)

Same first word

malwarefox.com

DNS History

23 records (11 active, 12 former)

●NSchristian.ns.cloudflare.com2026-05-26 → 2026-07-29 · 3 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-07-29 21:15:34

●NSjocelyn.ns.cloudflare.com2026-05-26 → 2026-07-29 · 3 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-07-29 21:15:34

○NSns22.trafficplanethosting.com2016-12-17 → 2026-05-14 · 4 obs

● 2016-12-17 03:51:42
● 2026-05-14 15:07:34
○ 2026-05-26 17:38:36
○ 2026-07-29 21:15:34

○NSns23.trafficplanethosting.com2016-12-17 → 2026-05-14 · 4 obs

● 2016-12-17 03:51:42
● 2026-05-14 15:07:34
○ 2026-05-26 17:38:36
○ 2026-07-29 21:15:34

●MXalt1.aspmx.l.google.com2016-12-17 → 2026-07-29 · 2 obs

● 2016-12-17 03:51:42
● 2026-07-29 21:15:34

●MXalt2.aspmx.l.google.com2016-12-17 → 2026-07-29 · 2 obs

● 2016-12-17 03:51:42
● 2026-07-29 21:15:34

●MXalt3.aspmx.l.google.com2016-12-17 → 2026-07-29 · 2 obs

● 2016-12-17 03:51:42
● 2026-07-29 21:15:34

●MXalt4.aspmx.l.google.com2016-12-17 → 2026-07-29 · 2 obs

● 2016-12-17 03:51:42
● 2026-07-29 21:15:34

●MXaspmx.l.google.com2016-12-17 → 2026-07-29 · 2 obs

● 2016-12-17 03:51:42
● 2026-07-29 21:15:34

●A104.21.10.1772026-05-26 → 2026-07-29 · 8 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-05-28 01:09:38
○ 2026-05-28 21:26:00
● 2026-05-28 22:58:06
○ 2026-07-15 12:21:24
● 2026-07-15 14:03:06
● 2026-07-29 21:15:34

●A172.67.146.402026-05-26 → 2026-07-29 · 8 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-05-28 01:09:38
○ 2026-05-28 21:26:00
● 2026-05-28 22:58:06
○ 2026-07-15 12:21:24
● 2026-07-15 14:03:06
● 2026-07-29 21:15:34

○A188.114.96.02026-05-28 → 2026-07-15 · 6 obs

○ 2026-05-28 01:09:38
● 2026-05-28 21:26:00
○ 2026-05-28 22:58:06
● 2026-07-15 12:21:24
○ 2026-07-15 14:03:06
○ 2026-07-29 21:15:34

○A188.114.97.02026-05-28 → 2026-07-15 · 6 obs

○ 2026-05-28 01:09:38
● 2026-05-28 21:26:00
○ 2026-05-28 22:58:06
● 2026-07-15 12:21:24
○ 2026-07-15 14:03:06
○ 2026-07-29 21:15:34

○A194.1.147.272026-02-20 → 2026-03-14 · 5 obs

○ 2016-12-17 03:51:42
● 2026-02-20 12:48:24
● 2026-03-14 13:45:32
○ 2026-04-09 13:02:02
○ 2026-07-29 21:15:34

○A194.1.147.532026-04-09 → 2026-05-14 · 5 obs

○ 2026-03-14 13:45:32
● 2026-04-09 13:02:02
● 2026-05-14 15:07:34
○ 2026-05-26 17:38:36
○ 2026-07-29 21:15:34

○A194.1.147.872026-02-20 → 2026-03-14 · 5 obs

○ 2016-12-17 03:51:42
● 2026-02-20 12:48:24
● 2026-03-14 13:45:32
○ 2026-04-09 13:02:02
○ 2026-07-29 21:15:34

○A194.1.147.962026-04-09 → 2026-05-14 · 5 obs

○ 2026-03-14 13:45:32
● 2026-04-09 13:02:02
● 2026-05-14 15:07:34
○ 2026-05-26 17:38:36
○ 2026-07-29 21:15:34

●A2606:4700:3033::6815:ab12026-07-15 → 2026-07-29 · 3 obs

○ 2026-07-15 12:21:24
● 2026-07-15 14:03:06
● 2026-07-29 21:15:34

●A2606:4700:3034::ac43:92282026-05-26 → 2026-07-29 · 8 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-05-28 01:09:38
○ 2026-05-28 21:26:00
● 2026-05-28 22:58:06
○ 2026-07-15 12:21:24
● 2026-07-15 14:03:06
● 2026-07-29 21:15:34

○A2606:4700:3037::6815:ab12026-05-26 → 2026-05-28 · 7 obs

○ 2026-05-14 15:07:34
● 2026-05-26 17:38:36
● 2026-05-28 01:09:38
○ 2026-05-28 21:26:00
● 2026-05-28 22:58:06
○ 2026-07-15 12:21:24
○ 2026-07-29 21:15:34

○A2a06:98c1:3120::2026-05-28 → 2026-07-15 · 6 obs

○ 2026-05-28 01:09:38
● 2026-05-28 21:26:00
○ 2026-05-28 22:58:06
● 2026-07-15 12:21:24
○ 2026-07-15 14:03:06
○ 2026-07-29 21:15:34

○A2a06:98c1:3121::2026-05-28 → 2026-07-15 · 6 obs

○ 2026-05-28 01:09:38
● 2026-05-28 21:26:00
○ 2026-05-28 22:58:06
● 2026-07-15 12:21:24
○ 2026-07-15 14:03:06
○ 2026-07-29 21:15:34

○A67.202.92.92016-12-17 → 2016-12-17 · 3 obs

● 2016-12-17 03:51:42
○ 2026-02-20 12:48:24
○ 2026-07-29 21:15:34

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
malwarefox.com	jocelyn.ns.cloudflare.com, christian.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.247

NS records: jocelyn.ns.cloudflare.com, christian.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malwarefox.com (unsigned zone)

⏱️ Timing

Total: 214ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.146.40, 104.21.10.177`
AAAA	2	`2606:4700:3034::ac43:9228, 2606:4700:3033::6815:ab1`
NS	2	`christian.ns.cloudflare.com, jocelyn.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`google-site-verification=yD9DvWb8w62QYA0, v=spf1 a mx a:malwarefox.com ip4:67.202.`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`christian.ns.cloudflare.com dns.cloudfla`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (jocelyn.ns.cloudflare.com, jocelyn.ns.cloudflare.com, jocelyn.ns.cloudflare.com...)

Analysis

IP Addresses

malwarefox.com resolves to four IP addresses: 104.21.10.177, 172.67.146.40, 2606:4700:3033::6815:ab1 and 2606:4700:3034::ac43:9228.

Among the host names that share IP numbers with malwarefox.com are lemondejuif.info, sk722.com, senssi.com and two others.

Name Servers

Two name servers handle the delegation for malwarefox.com: christian.ns.cloudflare.com and jocelyn.ns.cloudflare.com.

malwarefox.com has the same name server delegation as a number of other domains, such as fzvm.com, fwvg.com, dulq.com and two more.

malwarefox.com has at least partial name server overlap with other domains, such as trentostartup.it, artamental.com, ahamind.com and two others.

These name servers tend to appear together with the name servers april.ns.cloudflare.com, marty.ns.cloudflare.com and nelly.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

christian.ns.cloudflare.com resolves to 108.162.195.247, 162.159.44.247 and 172.64.35.247 among others, with 3 other IP addresses in total.

jocelyn.ns.cloudflare.com resolves to 108.162.192.174, 172.64.32.174 and 173.245.58.174 among others, with 3 other IP addresses in total.

Mail Servers

malwarefox.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

malwarefox.com shares at least some of its mail servers with other domains — for example subjecttoclimate.org, ns500754.ns500742.ns500754.ns500754.ns500704.ns500731.ns500688.ns500671.ns500649.lusty(0x736c7574)z.com, ns500742.ns500731.ns500742.ns500742.ns500742.ns500742.ns500688.ns500688.ns500671.ns500649.ns500678.ns500142.lusty(0x736c7574)z.com and two more.

It is common to find these mail servers paired with mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 more.

Hosts with two IP numbers each:

aspmx.l.google.com resolves to two addresses: 142.251.111.26 and 2607:f8b0:4004:c29::1b.

alt1.aspmx.l.google.com resolves to two addresses: 108.177.123.26 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com resolves to two addresses: 172.253.116.27 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com resolves to two addresses: 192.178.223.27 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com resolves to two addresses: 172.253.157.27 and 2a00:1450:400c:c23::1a.