worm.dev - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`worm.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:abb8^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:3fc3^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.63.195^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.171.184^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`aliza.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2637^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c237^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aliza.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2237^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aliza.ns.cloudflare.com`
		A	108.162.194.55^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	162.159.38.55^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	172.64.34.55^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
NS	`max.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b84^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c184^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`max.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2184^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`max.ns.cloudflare.com`
		A	108.162.193.132^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	172.64.33.132^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	173.245.59.132^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
MX	`mail.protonmail.ch` ⭐
		A	176.119.200.128^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mail.protonmail.ch`
		A	185.70.42.128^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mail.protonmail.ch`
		A	185.205.70.128^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mail.protonmail.ch`
MX	`mailsec.protonmail.ch`⁽²⁰⁾
		A	176.119.200.129^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.70.42.129^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.205.70.129^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mailsec.protonmail.ch`
TXT	`protonmail-verification=c54927c2b31d2d60683368cadebfe4c906cb7d89`
TXT	`v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.63.195, 172.67.171.184
		IPv6 hints	2606:4700:3032::ac43:abb8, 2606:4700:3033::6815:3fc3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=253, name=cloudflare-ech.com
SOA	`aliza.ns.cloudflare.com`dns@cloudflare.com serial=2412435498

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

worm.ovh

worm.myds.me

worm.cz

worm.moe

worm.(0x736578)

worm.ca

worm.nl

worm.nu

worm.info

worm.farm

worm.se

worm.at

worm.gay

worm.ir

worm.ph

worm.is

worm.pet

worm.im

worm.com.cn

worm.men

worm.pink

worm.co.in

worm.run

worm.me

worm.skin

worm.lat

worm.rip

worm.wtf

worm.dk

worm.co.uk

worm.zip

worm.live

worm.family

worm.world

worm.so

worm.cool

worm.ch

worm.horse

worm.earth

worm.com.ph

worm.guru

worm.zone

worm.org

worm.sh

worm.co

worm.it

worm.exchange

worm.bet

worm.dance

worm.io

worm.ro

worm.canva-apps.cn

worm.website

worm.ae

worm.fr

worm.com.pl

worm.be

worm.ly

worm.su

worm.ee

worm.tv

worm.town

worm.net

worm.ru

worm.com

worm.de

worm.cn

worm.dev

worm.wine

worm.com.br

worm.pics

worm.eu

worm.pw

worm.cx

worm.media

worm.pl

worm.co.il

worm.lol

worm.me.uk

worm.social

worm.lifestyle

worm.co.at

worm.boutique

worm.trade

worm.biz

worm.group

worm.city

worm.com.au

worm.works

worm.kasserver.com

worm.us

worm.org.ua

worm.ltd

worm.com.pt

worm.ws

Similar names

womr.ru

wrmo.ru

romw.ph

mrow.ph

rowm.io

romw.net

mrow.lol

omrw.ru

mrow.eu

rmwo.com

wmor.net

rowm.delivery

wrmo.com

orwm.org

rowm.xyz

wrom.com

mwro.com

mowr.org

romw.co

mowr.gov.iq

mowr.com

womr.com

orwm.buzz

mowr.de

morw.de

romw.com.br

rowm.uk

rwom.cn

rowm.co.kr

mowr.com.au

rowm.org

mowr.gov.in

wrmo.net

mrow.land

mowr.shop

wrom.eu

mrow.de

morw.net

romw.com

rowm.co.uk

mrwo.cl

wmor.com

rowm.space

ormw.com

rmwo.shop

mrow.ca

wmor.de

wmor.info

mwor.de

orwm.com

rwmo.com

mrow.vg

mrow.com

Previous names

Next names

DNS History

12 records (8 active, 4 former)

●NSaliza.ns.cloudflare.com2026-08-27 → 2026-09-07 · 2 obs

● 2026-08-27 01:47:36
● 2026-09-07 09:06:04

●NSmax.ns.cloudflare.com2026-08-27 → 2026-09-07 · 2 obs

● 2026-08-27 01:47:36
● 2026-09-07 09:06:04

●MXmail.protonmail.ch2026-08-27 → 2026-09-07 · 2 obs

● 2026-08-27 01:47:36
● 2026-09-07 09:06:04

●MXmailsec.protonmail.ch2026-08-27 → 2026-09-07 · 2 obs

● 2026-08-27 01:47:36
● 2026-09-07 09:06:04

●A104.21.63.1952026-08-27 → 2026-09-07 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-09-07 09:06:04

●A172.67.171.1842026-08-27 → 2026-09-07 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-09-07 09:06:04

○A188.114.96.02026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-09-07 09:06:04

○A188.114.97.02026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-09-07 09:06:04

●A2606:4700:3032::ac43:abb82026-08-27 → 2026-09-07 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-09-07 09:06:04

●A2606:4700:3033::6815:3fc32026-08-27 → 2026-09-07 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-09-07 09:06:04

○A2a06:98c1:3120::2026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-09-07 09:06:04

○A2a06:98c1:3121::2026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-09-07 09:06:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
worm.dev	aliza.ns.cloudflare.com, max.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.194.55

NS records: aliza.ns.cloudflare.com, max.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for worm.dev (unsigned zone)

⏱️ Timing

Total: 954ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.63.195, 172.67.171.184`
AAAA	2	`2606:4700:3033::6815:3fc3, 2606:4700:3032::ac43:abb8`
NS	2	`aliza.ns.cloudflare.com, max.ns.cloudflare.com`
MX	2	`mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)`
TXT	2	`protonmail-verification=c54927c2b31d2d60, v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aliza.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

worm.dev points to the four IP addresses 104.21.63.195, 172.67.171.184, 2606:4700:3032::ac43:abb8 and 2606:4700:3033::6815:3fc3.

www.e-voo.com, uplift-g2p.online, mail.ulto.ca and two other host names share IP numbers with worm.dev.

Name Servers

Two name servers handle the delegation for worm.dev: aliza.ns.cloudflare.com and max.ns.cloudflare.com.

worm.dev uses the same name servers as several other domains — among them proxy-openai-api-exj.pages.dev, 3493832553.workers.dev, gboo4gboo.workers.dev and two more.

The name servers of worm.dev overlap at least partially with those of other domains — among them latoslot.workers.dev, np24.net, xn----8sbaajo8bfjjtrlh.xn--p1ai and two more.

These name servers commonly appear in combination with the name servers coby.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

aliza.ns.cloudflare.com resolves to 108.162.194.55, 162.159.38.55 and 172.64.34.55 among others, with 3 other IP addresses in total.

max.ns.cloudflare.com resolves to 108.162.193.132, 172.64.33.132 and 173.245.59.132 among others, with 3 other IP addresses in total.

Mail Servers

Mail for worm.dev is handled by two mail servers — mail.protonmail.ch and mailsec.protonmail.ch.

worm.dev uses an identical mail server configuration to several other domains — among them grindshell.com, vouch.sh, dawid.me and two more.

worm.dev has at least partial mail server overlap with other domains such as cuttingedgehauntedhouse.com, simonpjones.org, rogi.ch and two more.

Both mail.protonmail.ch and mailsec.protonmail.ch point to three IP numbers: mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128, while mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129.