nefarious.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

nefarious.dev

DNSSECπŸ”’ Signed (DS record present)
A2606:4700:3032::ac43:db11Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::6815:4e58Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.78.88Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.219.17Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSmargo.ns.cloudflare.com ⭐
NSroxy.ns.cloudflare.com
A2606:4700:50::adf5:3a8eCloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c08eCloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:208eCloudflare2a06:98c1:50::/45
A108.162.192.142Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.32.142Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A173.245.58.142Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXroute2.mx.cloudflare.net ⭐
A2606:4700:f5::eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute3.mx.cloudflare.net(16)
A2606:4700:f5::11πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute1.mx.cloudflare.net(66)
A2606:4700:f5::bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.78.88, 172.67.219.17
IPv6 hints2606:4700:3032::ac43:db11, 2606:4700:3036::6815:4e58
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=61, name=cloudflare-ech.com
SOAmargo.ns.cloudflare.comdns@cloudflare.com serial=2416354645

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

DNS History

13 records (9 active, 4 former)

NSmargo.ns.cloudflare.comroxy.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.78.88172.67.219.172606:4700:3032::ac43:db112606:4700:3036::6815:4e58188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSmargo.ns.cloudflare.com2026-08-31 β†’ 2026-10-21 Β· 2 obs
● 2026-08-31 11:00:14
● 2026-10-21 13:38:14
●NSroxy.ns.cloudflare.com2026-08-31 β†’ 2026-10-21 Β· 2 obs
● 2026-08-31 11:00:14
● 2026-10-21 13:38:14
●MXroute1.mx.cloudflare.net2026-08-31 β†’ 2026-10-21 Β· 2 obs
● 2026-08-31 11:00:14
● 2026-10-21 13:38:14
●MXroute2.mx.cloudflare.net2026-08-31 β†’ 2026-10-21 Β· 2 obs
● 2026-08-31 11:00:14
● 2026-10-21 13:38:14
●MXroute3.mx.cloudflare.net2026-08-31 β†’ 2026-10-21 Β· 2 obs
● 2026-08-31 11:00:14
● 2026-10-21 13:38:14
●A104.21.78.882026-09-01 β†’ 2026-10-21 Β· 7 obs
β—‹ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
β—‹ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
β—‹ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-10-21 13:38:14
●A172.67.219.172026-09-01 β†’ 2026-10-21 Β· 7 obs
β—‹ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
β—‹ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
β—‹ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-10-21 13:38:14
β—‹A188.114.96.02026-08-31 β†’ 2026-10-01 Β· 7 obs
● 2026-08-31 11:00:14
β—‹ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
β—‹ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
β—‹ 2026-10-15 17:31:06
β—‹ 2026-10-21 13:38:14
β—‹A188.114.97.02026-08-31 β†’ 2026-10-01 Β· 7 obs
● 2026-08-31 11:00:14
β—‹ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
β—‹ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
β—‹ 2026-10-15 17:31:06
β—‹ 2026-10-21 13:38:14
●A2606:4700:3032::ac43:db112026-09-01 β†’ 2026-10-21 Β· 7 obs
β—‹ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
β—‹ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
β—‹ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-10-21 13:38:14
●A2606:4700:3036::6815:4e582026-09-01 β†’ 2026-10-21 Β· 7 obs
β—‹ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
β—‹ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
β—‹ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-10-21 13:38:14
β—‹A2a06:98c1:3120::2026-08-31 β†’ 2026-10-01 Β· 7 obs
● 2026-08-31 11:00:14
β—‹ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
β—‹ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
β—‹ 2026-10-15 17:31:06
β—‹ 2026-10-21 13:38:14
β—‹A2a06:98c1:3121::2026-08-31 β†’ 2026-10-01 Β· 7 obs
● 2026-08-31 11:00:14
β—‹ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
β—‹ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
β—‹ 2026-10-15 17:31:06
β—‹ 2026-10-21 13:38:14

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
nefarious.devmargo.ns.cloudflare.com, roxy.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.192.142

NS records: margo.ns.cloudflare.com, roxy.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 1050ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.219.17, 104.21.78.88
AAAA22606:4700:3032::ac43:db11, 2606:4700:3036::6815:4e58
NS2margo.ns.cloudflare.com, roxy.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 10), route3.mx.cloudflare.net (pri: 16)...
TXT1v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1margo.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

nefarious.dev points to the four IP addresses 104.21.78.88, 172.67.219.17, 2606:4700:3032::ac43:db11 and 2606:4700:3036::6815:4e58.

Name Servers

nefarious.dev is delegated to two name servers, margo.ns.cloudflare.com and roxy.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

roxy.ns.cloudflare.com maps to 108.162.192.142, 172.64.32.142, 173.245.58.142 and 3 additional IP addresses.

Mail Servers

The MX records for nefarious.dev list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

Hostnames that resolve to 6 IP addresses:

route1.mx.cloudflare.net maps to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 additional IP addresses.

route2.mx.cloudflare.net maps to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 additional IP addresses.

route3.mx.cloudflare.net maps to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 additional IP addresses.