malwarehelp.org - dns.ninja

`malwarehelp.org`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:809e^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:21b^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.2.27^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.128.158^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`jake.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b7a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jake.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c17a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jake.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:217a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jake.ns.cloudflare.com`
		A	108.162.193.122^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jake.ns.cloudflare.com`
		A	172.64.33.122^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jake.ns.cloudflare.com`
		A	173.245.59.122^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jake.ns.cloudflare.com`
NS	`kay.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a7d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kay.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c07d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kay.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:207d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kay.ns.cloudflare.com`
		A	108.162.192.125^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kay.ns.cloudflare.com`
		A	172.64.32.125^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kay.ns.cloudflare.com`
		A	173.245.58.125^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kay.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c08::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`bi-in-f27.1e100.net`
		A	172.253.115.27^{🇺🇸 Google172.253.115.0/24}
			PTR	`bg-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.27^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f27.1e100.net`
MX	`aspmx2.googlemail.com`⁽¹⁰⁾
		A	2800:3f0:4003:c0f::1a^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.26^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f26.1e100.net`
MX	`aspmx3.googlemail.com`⁽¹⁰⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.27^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f27.1e100.net`
TXT	`google-site-verification=07HGVWtc0k-4G-gqV-OJh34d9qAOZ9W4D8fHY2UgdsY`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.2.27, 172.67.128.158
		IPv6 hints	2606:4700:3032::ac43:809e, 2606:4700:3034::6815:21b
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=148, name=cloudflare-ech.com
SOA	`jake.ns.cloudflare.com`dns@cloudflare.com serial=2409153851

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1783944830

WOT: SAFE (92/100)

Subdomains

images.malwarehelp.org

www.malwarehelp.org

Same first word

malwarehelp.org

DNS History

15 records (11 active, 4 former)

●NSjake.ns.cloudflare.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●NSkay.ns.cloudflare.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●MXalt1.aspmx.l.google.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●MXalt2.aspmx.l.google.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●MXaspmx.l.google.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●MXaspmx2.googlemail.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●MXaspmx3.googlemail.com2015-07-23 → 2026-07-13 · 2 obs

● 2015-07-23 01:03:08
● 2026-07-13 12:30:30

●A104.21.2.272026-03-03 → 2026-07-13 · 3 obs

○ 2016-12-25 06:59:02
● 2026-03-03 22:54:46
● 2026-07-13 12:30:30

○A104.28.20.102015-07-23 → 2016-12-25 · 4 obs

● 2015-07-23 01:03:08
● 2016-12-25 06:59:02
○ 2026-03-03 22:54:46
○ 2026-07-13 12:30:30

○A104.28.21.102015-07-23 → 2016-12-25 · 4 obs

● 2015-07-23 01:03:08
● 2016-12-25 06:59:02
○ 2026-03-03 22:54:46
○ 2026-07-13 12:30:30

●A172.67.128.1582026-03-03 → 2026-07-13 · 3 obs

○ 2016-12-25 06:59:02
● 2026-03-03 22:54:46
● 2026-07-13 12:30:30

○A2606:4700:3030::6815:21b2026-03-03 → 2026-03-03 · 4 obs

○ 2016-12-25 06:59:02
● 2026-03-03 22:54:46
○ 2026-07-01 08:54:52
○ 2026-07-13 12:30:30

○A2606:4700:3031::ac43:809e2026-03-03 → 2026-03-03 · 4 obs

○ 2016-12-25 06:59:02
● 2026-03-03 22:54:46
○ 2026-07-01 08:54:52
○ 2026-07-13 12:30:30

●A2606:4700:3032::ac43:809e2026-07-01 → 2026-07-13 · 3 obs

○ 2026-03-03 22:54:46
● 2026-07-01 08:54:52
● 2026-07-13 12:30:30

●A2606:4700:3034::6815:21b2026-07-01 → 2026-07-13 · 3 obs

○ 2026-03-03 22:54:46
● 2026-07-01 08:54:52
● 2026-07-13 12:30:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org	-
malwarehelp.org	kay.ns.cloudflare.com, jake.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.122

NS records: kay.ns.cloudflare.com, jake.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malwarehelp.org (unsigned zone)

⏱️ Timing

Total: 621ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.2.27, 172.67.128.158`
AAAA	2	`2606:4700:3032::ac43:809e, 2606:4700:3034::6815:21b`
NS	2	`jake.ns.cloudflare.com, kay.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), aspmx2.googlemail.com (pri: 10)...`
TXT	1	`google-site-verification=07HGVWtc0k-4G-g`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`jake.ns.cloudflare.com dns.cloudflare.co`

Analysis

Hierarchy

The parent domain of images.malwarehelp.org and www.malwarehelp.org is malwarehelp.org.

IP Addresses

malwarehelp.org directs to four IP numbers, which are 104.21.2.27, 172.67.128.158, 2606:4700:3032::ac43:809e and 2606:4700:3034::6815:21b.

Among the host names that share IP numbers with malwarehelp.org are politikym.net, clumi.ai, mns-bahrain.com and two others.

Name Servers

malwarehelp.org uses two name servers for its delegation: jake.ns.cloudflare.com and kay.ns.cloudflare.com.

malwarehelp.org has the same name server delegation as a number of other domains, such as hkashop.com, haizg.com, moq-tex.com and two more.

The name servers of malwarehelp.org overlap at least partially with those of other domains — among them yodj.es, bende.cn, mistycasino81.com and two more.

These name servers commonly appear in combination with the name servers sue.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

Hostname jake.ns.cloudflare.com directs to 108.162.193.122, 172.64.33.122 and 173.245.59.122 along with 3 other IP addresses.

Hostname kay.ns.cloudflare.com directs to 108.162.192.125, 172.64.32.125 and 173.245.58.125 along with 3 other IP addresses.

Mail Servers

Five mail servers handle malwarehelp.org: aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com and two others.

malwarehelp.org shares at least some of its mail servers with other domains — for example residentialgta.com, gujrera.com, cloudranger.io and two more.

It is common to find these mail servers paired with mail servers alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and 3 more.

Hosts with two IP numbers each:

aspmx2.googlemail.com directs traffic to 108.177.123.26 and 2800:3f0:4003:c0f::1a.

aspmx3.googlemail.com directs traffic to 172.253.116.27 and 2a00:1450:400b:c02::1b.

aspmx.l.google.com directs traffic to 172.253.115.27 and 2607:f8b0:4004:c08::1b.

alt1.aspmx.l.google.com directs traffic to 108.177.123.27 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com directs traffic to 172.253.116.27 and 2a00:1450:400b:c02::1b.

Both aspmx3.googlemail.com and alt2.aspmx.l.google.com resolve to 2a00:1450:400b:c02::1b IP addresses each.

Both aspmx3.googlemail.com and alt2.aspmx.l.google.com resolve to 172.253.116.27 IP addresses each.