powershellprotector.com - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`powershellprotector.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::6815:4433^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:badd^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.68.51^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.186.221^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brenda.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brenda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brenda.ns.cloudflare.com`
		A	108.162.192.77^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	172.64.32.77^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	173.245.58.77^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
NS	`joaquin.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cdc^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joaquin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3dc^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`joaquin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23dc^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`joaquin.ns.cloudflare.com`
		A	108.162.195.220^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joaquin.ns.cloudflare.com`
		A	162.159.44.220^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joaquin.ns.cloudflare.com`
		A	172.64.35.220^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`joaquin.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.68.51, 172.67.186.221
		IPv6 hints	2606:4700:3035::6815:4433, 2606:4700:3037::ac43:badd
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=92, name=cloudflare-ech.com
SOA	`brenda.ns.cloudflare.com`dns@cloudflare.com serial=2415042533

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1790845154

Same first word

powershellprotector.com

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSbrenda.ns.cloudflare.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●NSjoaquin.ns.cloudflare.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●MXeforward1.registrar-servers.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●MXeforward2.registrar-servers.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●MXeforward3.registrar-servers.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●MXeforward4.registrar-servers.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●MXeforward5.registrar-servers.com2026-09-14 → 2026-10-01 · 2 obs

● 2026-09-14 07:19:56
● 2026-10-01 09:17:42

●A104.21.68.512026-09-20 → 2026-10-01 · 5 obs

○ 2026-09-14 07:19:56
● 2026-09-20 21:08:36
○ 2026-09-21 05:38:10
● 2026-09-30 00:43:26
● 2026-10-01 09:17:42

●A172.67.186.2212026-09-20 → 2026-10-01 · 5 obs

○ 2026-09-14 07:19:56
● 2026-09-20 21:08:36
○ 2026-09-21 05:38:10
● 2026-09-30 00:43:26
● 2026-10-01 09:17:42

○A188.114.96.02026-09-14 → 2026-09-21 · 5 obs

● 2026-09-14 07:19:56
○ 2026-09-20 21:08:36
● 2026-09-21 05:38:10
○ 2026-09-30 00:43:26
○ 2026-10-01 09:17:42

○A188.114.97.02026-09-14 → 2026-09-21 · 5 obs

● 2026-09-14 07:19:56
○ 2026-09-20 21:08:36
● 2026-09-21 05:38:10
○ 2026-09-30 00:43:26
○ 2026-10-01 09:17:42

●A2606:4700:3035::6815:44332026-09-20 → 2026-10-01 · 5 obs

○ 2026-09-14 07:19:56
● 2026-09-20 21:08:36
○ 2026-09-21 05:38:10
● 2026-09-30 00:43:26
● 2026-10-01 09:17:42

●A2606:4700:3037::ac43:badd2026-09-20 → 2026-10-01 · 5 obs

○ 2026-09-14 07:19:56
● 2026-09-20 21:08:36
○ 2026-09-21 05:38:10
● 2026-09-30 00:43:26
● 2026-10-01 09:17:42

○A2a06:98c1:3120::2026-09-14 → 2026-09-21 · 5 obs

● 2026-09-14 07:19:56
○ 2026-09-20 21:08:36
● 2026-09-21 05:38:10
○ 2026-09-30 00:43:26
○ 2026-10-01 09:17:42

○A2a06:98c1:3121::2026-09-14 → 2026-09-21 · 5 obs

● 2026-09-14 07:19:56
○ 2026-09-20 21:08:36
● 2026-09-21 05:38:10
○ 2026-09-30 00:43:26
○ 2026-10-01 09:17:42

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
powershellprotector.com	brenda.ns.cloudflare.com, joaquin.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.220

NS records: brenda.ns.cloudflare.com, joaquin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for powershellprotector.com (unsigned zone)

⏱️ Timing

Total: 201ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.68.51, 172.67.186.221`
AAAA	2	`2606:4700:3037::ac43:badd, 2606:4700:3035::6815:4433`
NS	2	`brenda.ns.cloudflare.com, joaquin.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brenda.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (brenda.ns.cloudflare.com, brenda.ns.cloudflare.com, brenda.ns.cloudflare.com...)

Analysis

IP Addresses

powershellprotector.com has four IP addresses: 104.21.68.51, 172.67.186.221, 2606:4700:3035::6815:4433 and 2606:4700:3037::ac43:badd.

Among the host names that share IP numbers with powershellprotector.com are learnn-code.icu, techabreather.com, empr.io and two others.

Name Servers

powershellprotector.com is served by two delegated name servers, brenda.ns.cloudflare.com and joaquin.ns.cloudflare.com.

powershellprotector.com has the same name server delegation as a number of other domains, such as meshcore.si, members-e2c.workers.dev, homeforgu.top and two more.

powershellprotector.com partially shares its NS delegation with several other domains, including cf-workers-docker-io-2rc.pages.dev, taiapk.net, n9x0j4lu7o.pages.dev and two others.

These name servers are regularly seen alongside hans.ns.cloudflare.com and jonah.ns.cloudflare.com as name servers.

Host names resolving to 6 IP numbers:

brenda.ns.cloudflare.com carries IP addresses 108.162.192.77, 172.64.32.77 and 173.245.58.77, with 3 other addresses beyond those.

joaquin.ns.cloudflare.com carries IP addresses 108.162.195.220, 162.159.44.220 and 172.64.35.220, with 3 other addresses beyond those.

Mail Servers

Mail for powershellprotector.com is handled by five mail servers, namely eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

powershellprotector.com shares at least some of its mail servers with other domains — for example safello.org, nutsnacks.org, 3dprintingbeaverton.ca and two more.

It is common for these mail servers to co-occur with eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com as mail servers.

Hosts that resolve to one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com all direct to 162.255.118.51.

These two host names — eforward2.registrar-servers.com and eforward4.registrar-servers.com — each point to 162.255.118.52 IP addresses.