nextworm.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`nextworm.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:cf4f^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:5599^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.85.153^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.207.79^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`roxy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a8e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roxy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c08e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`roxy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:208e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`roxy.ns.cloudflare.com`
		A	108.162.192.142^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roxy.ns.cloudflare.com`
		A	172.64.32.142^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roxy.ns.cloudflare.com`
		A	173.245.58.142^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roxy.ns.cloudflare.com`
NS	`theo.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b90^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`theo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c190^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`theo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2190^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`theo.ns.cloudflare.com`
		A	108.162.193.144^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`theo.ns.cloudflare.com`
		A	172.64.33.144^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`theo.ns.cloudflare.com`
		A	173.245.59.144^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`theo.ns.cloudflare.com`
MX	`route2.mx.cloudflare.net` ⭐
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
MX	`route1.mx.cloudflare.net`⁽⁶⁹⁾
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route3.mx.cloudflare.net`⁽⁶⁹⁾
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
TXT	`google-site-verification=24P0WzuE7dHf-yF0lrwX8eoESPpHgMmQ1cLSevrGQ50`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.85.153, 172.67.207.79
		IPv6 hints	2606:4700:3033::ac43:cf4f, 2606:4700:3036::6815:5599
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=109, name=cloudflare-ech.com
SOA	`roxy.ns.cloudflare.com`dns@cloudflare.com serial=2412290827

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786835964

⚠️ On DNS blocklist: urlshortener

Previously MX for

nextworm.com

Subdomains

track.nextworm.com

www.nextworm.com

Same first word

nextworm.com

Similar names

mnetworx.net

DNS History

19 records (9 active, 10 former)

○NSns1.vultr.com2017-08-11 → 2017-08-11 · 3 obs

● 2017-08-11 02:11:28
○ 2026-03-28 03:49:20
○ 2026-08-15 23:28:36

○NSns2.vultr.com2017-08-11 → 2017-08-11 · 3 obs

● 2017-08-11 02:11:28
○ 2026-03-28 03:49:20
○ 2026-08-15 23:28:36

●NSroxy.ns.cloudflare.com2026-03-28 → 2026-08-15 · 3 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-08-15 23:28:36

●NStheo.ns.cloudflare.com2026-03-28 → 2026-08-15 · 3 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-08-15 23:28:36

○MXnextworm.com2017-08-11 → 2017-08-11 · 3 obs

● 2017-08-11 02:11:28
○ 2026-03-28 03:49:20
○ 2026-08-15 23:28:36

●MXroute1.mx.cloudflare.net2026-03-28 → 2026-08-15 · 3 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-08-15 23:28:36

●MXroute2.mx.cloudflare.net2026-03-28 → 2026-08-15 · 3 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-08-15 23:28:36

●MXroute3.mx.cloudflare.net2026-03-28 → 2026-08-15 · 3 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-08-15 23:28:36

●A104.21.85.1532026-03-28 → 2026-08-15 · 6 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-06-06 06:42:48
○ 2026-07-02 13:39:32
● 2026-08-15 23:28:34
● 2026-08-15 23:28:36

●A172.67.207.792026-03-28 → 2026-08-15 · 6 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-06-06 06:42:48
○ 2026-07-02 13:39:32
● 2026-08-15 23:28:34
● 2026-08-15 23:28:36

○A188.114.96.02026-07-02 → 2026-07-02 · 5 obs

○ 2026-03-28 03:49:20
○ 2026-06-06 06:42:48
● 2026-07-02 13:39:32
○ 2026-08-15 23:28:34
○ 2026-08-15 23:28:36

○A188.114.97.02026-07-02 → 2026-07-02 · 5 obs

○ 2026-03-28 03:49:20
○ 2026-06-06 06:42:48
● 2026-07-02 13:39:32
○ 2026-08-15 23:28:34
○ 2026-08-15 23:28:36

○A2606:4700:3032::6815:55992026-03-28 → 2026-06-06 · 5 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-06-06 06:42:48
○ 2026-07-02 13:39:32
○ 2026-08-15 23:28:36

○A2606:4700:3032::ac43:cf4f2026-03-28 → 2026-06-06 · 5 obs

○ 2017-08-11 02:11:28
● 2026-03-28 03:49:20
● 2026-06-06 06:42:48
○ 2026-07-02 13:39:32
○ 2026-08-15 23:28:36

●A2606:4700:3033::ac43:cf4f2026-08-15 → 2026-08-15 · 3 obs

○ 2026-07-02 13:39:32
● 2026-08-15 23:28:34
● 2026-08-15 23:28:36

●A2606:4700:3036::6815:55992026-08-15 → 2026-08-15 · 3 obs

○ 2026-07-02 13:39:32
● 2026-08-15 23:28:34
● 2026-08-15 23:28:36

○A2a06:98c1:3120::2026-07-02 → 2026-07-02 · 5 obs

○ 2026-03-28 03:49:20
○ 2026-06-06 06:42:48
● 2026-07-02 13:39:32
○ 2026-08-15 23:28:34
○ 2026-08-15 23:28:36

○A2a06:98c1:3121::2026-07-02 → 2026-07-02 · 5 obs

○ 2026-03-28 03:49:20
○ 2026-06-06 06:42:48
● 2026-07-02 13:39:32
○ 2026-08-15 23:28:34
○ 2026-08-15 23:28:36

○A45.76.190.1302017-08-11 → 2017-08-11 · 3 obs

● 2017-08-11 02:11:28
○ 2026-03-28 03:49:20
○ 2026-08-15 23:28:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
nextworm.com	roxy.ns.cloudflare.com, theo.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.142

NS records: roxy.ns.cloudflare.com, theo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for nextworm.com (unsigned zone)

⏱️ Timing

Total: 189ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.207.79, 104.21.85.153`
AAAA	2	`2606:4700:3033::ac43:cf4f, 2606:4700:3036::6815:5599`
NS	2	`roxy.ns.cloudflare.com, theo.ns.cloudflare.com`
MX	3	`route2.mx.cloudflare.net (pri: 39), route1.mx.cloudflare.net (pri: 69)...`
TXT	2	`google-site-verification=24P0WzuE7dHf-yF, v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`roxy.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (roxy.ns.cloudflare.com, roxy.ns.cloudflare.com, roxy.ns.cloudflare.com...)

Analysis

Hierarchy

The parent domain of track.nextworm.com and www.nextworm.com is nextworm.com.

IP Addresses

nextworm.com points to the four IP addresses 104.21.85.153, 172.67.207.79, 2606:4700:3033::ac43:cf4f and 2606:4700:3036::6815:5599.

Among the host names that share IP numbers with nextworm.com are mctp.mx, led-bd.com, bankinglab.tech and two others.

Name Servers

nextworm.com uses two name servers for its delegation: roxy.ns.cloudflare.com and theo.ns.cloudflare.com.

nextworm.com has the same name server delegation as a number of other domains, such as domovida.com, solutionenligne.org, myvictorinox.com and two more.

There is at least partial name server overlap between nextworm.com and other domains — 2019auditions.com, projectzomboid.com, ranking.fi and two more among them.

The name servers gwen.ns.cloudflare.com, galilea.ns.cloudflare.com and greg.ns.cloudflare.com are often found in combination with these name servers.

Host names resolving to 6 IP numbers:

Hostname roxy.ns.cloudflare.com directs to 108.162.192.142, 172.64.32.142 and 173.245.58.142 along with 3 other IP addresses.

Hostname theo.ns.cloudflare.com directs to 108.162.193.144, 172.64.33.144 and 173.245.59.144 along with 3 other IP addresses.

Mail Servers

Incoming mail for nextworm.com is delivered via three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

nextworm.com shares at least some of its mail servers with other domains — for example cbkt.org, deepcleanaz.com, mebooking.com and two more.

Host names resolving to 6 IP numbers:

Hostname route1.mx.cloudflare.net directs to 162.159.205.11, 162.159.205.12 and 162.159.205.13 along with 3 other IP addresses.

Hostname route2.mx.cloudflare.net directs to 162.159.205.17, 162.159.205.18 and 162.159.205.19 along with 3 other IP addresses.

Hostname route3.mx.cloudflare.net directs to 162.159.205.23, 162.159.205.24 and 162.159.205.25 along with 3 other IP addresses.