worms.ru - dns.ninja

worms.ru

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:19caπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::ac43:8688πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.25.202Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.134.136πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSamy.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a65πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A2803:f800:50::6ca2:c065πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRamy.ns.cloudflare.com
A2a06:98c1:50::ac40:2065πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRamy.ns.cloudflare.com
A108.162.192.101πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A172.64.32.101πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A173.245.58.101πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
NSgabe.ns.cloudflare.com
A2606:4700:58::adf5:3b72πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabe.ns.cloudflare.com
A2803:f800:50::6ca2:c172πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgabe.ns.cloudflare.com
A2a06:98c1:50::ac40:2172πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRgabe.ns.cloudflare.com
A108.162.193.114πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabe.ns.cloudflare.com
A172.64.33.114πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabe.ns.cloudflare.com
A173.245.59.114πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabe.ns.cloudflare.com
MXmx.yandex.net ⭐
A2a02:6b8::311πŸ‡·πŸ‡Ί TELETECH2a02:6b8::/32 Yandex network
PTRmxfront.stable.qloud-b.yandex.net
A77.88.21.249πŸ‡·πŸ‡Ί TELETECH77.88.0.0/18 Yandex enterprise network
PTRmxfront.stable.qloud-b.yandex.net
TXT3ad226f4ba9ddfb077cb0bdcfaa6d6307cd51ed6
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.25.202, 172.67.134.136
IPv6 hints2606:4700:3032::6815:19ca, 2606:4700:3032::ac43:8688
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=246, name=cloudflare-ech.com
SOAamy.ns.cloudflare.comdns@cloudflare.com serial=2409979980

ru

DNSSECπŸ”’ Signed (DS record present)
NSa.dns.ripn.net ⭐
NSb.dns.ripn.net
NSc.tld-servers.ru
NSd.dns.ripn.net
NSe.dns.ripn.net
NSf.dns.ripn.net
SOAa.dns.ripn.nethostmaster@ripn.net serial=4069767
WOT: SAFE (60/100)

Previously MX for

Same first word

Similar names

DNS History

18 records (7 active, 11 former)

200920112013201520172019202120232025NSamy.ns.cloudflare.comgabe.ns.cloudflare.comns1.sedoparking.comns1.siteka.comns2.sedoparking.comns2.siteka.comMXmx.yandex.netlocalhostmail.nickstel.comworms.ruA104.21.25.202172.67.134.1362606:4700:3032::6815:19ca2606:4700:3032::ac43:86882606:4700:3033::ac43:868872.52.4.12074.52.124.288.99.0.220
●NSamy.ns.cloudflare.com2017-05-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2017-01-17 21:56:44
● 2017-05-09 20:49:02
● 2026-07-27 12:44:48
●NSgabe.ns.cloudflare.com2017-05-09 β†’ 2026-07-27 Β· 3 obs
β—‹ 2017-01-17 21:56:44
● 2017-05-09 20:49:02
● 2026-07-27 12:44:48
β—‹NSns1.sedoparking.com2015-07-08 β†’ 2017-01-17 Β· 5 obs
β—‹ 2008-11-24 00:28:26
● 2015-07-08 15:43:56
● 2017-01-17 21:56:44
β—‹ 2017-05-09 20:49:02
β—‹ 2026-07-27 12:44:48
β—‹NSns1.siteka.com2008-11-24 β†’ 2008-11-24 Β· 3 obs
● 2008-11-24 00:28:26
β—‹ 2015-07-08 15:43:56
β—‹ 2026-07-27 12:44:48
β—‹NSns2.sedoparking.com2015-07-08 β†’ 2017-01-17 Β· 5 obs
β—‹ 2008-11-24 00:28:26
● 2015-07-08 15:43:56
● 2017-01-17 21:56:44
β—‹ 2017-05-09 20:49:02
β—‹ 2026-07-27 12:44:48
β—‹NSns2.siteka.com2008-11-24 β†’ 2008-11-24 Β· 3 obs
● 2008-11-24 00:28:26
β—‹ 2015-07-08 15:43:56
β—‹ 2026-07-27 12:44:48
β—‹MXlocalhost2016-10-16 β†’ 2017-05-09 Β· 5 obs
β—‹ 2016-07-23 00:03:42
● 2016-10-16 15:26:30
● 2017-05-09 20:49:02
β—‹ 2017-08-20 02:58:40
β—‹ 2026-07-27 12:44:48
β—‹MXmail.nickstel.com2015-07-08 β†’ 2016-07-23 Β· 5 obs
β—‹ 2008-11-24 00:28:26
● 2015-07-08 15:43:56
● 2016-07-23 00:03:42
β—‹ 2016-10-16 15:26:30
β—‹ 2026-07-27 12:44:48
●MXmx.yandex.net2017-08-20 β†’ 2026-07-27 Β· 6 obs
β—‹ 2017-05-09 20:49:02
● 2017-08-20 02:58:40
● 2017-09-10 21:38:46
β—‹ 2026-07-02 05:35:18
● 2026-07-02 07:30:44
● 2026-07-27 12:44:48
β—‹MXworms.ru2008-11-24 β†’ 2008-11-24 Β· 3 obs
● 2008-11-24 00:28:26
β—‹ 2015-07-08 15:43:56
β—‹ 2026-07-27 12:44:48
●A104.21.25.2022026-02-14 β†’ 2026-07-27 Β· 5 obs
β—‹ 2017-09-10 21:38:46
● 2026-02-14 20:00:20
β—‹ 2026-07-02 05:35:18
● 2026-07-02 07:30:44
● 2026-07-27 12:44:48
●A172.67.134.1362026-02-14 β†’ 2026-07-27 Β· 5 obs
β—‹ 2017-09-10 21:38:46
● 2026-02-14 20:00:20
β—‹ 2026-07-02 05:35:18
● 2026-07-02 07:30:44
● 2026-07-27 12:44:48
●A2606:4700:3032::6815:19ca2026-02-14 β†’ 2026-07-27 Β· 5 obs
β—‹ 2017-09-10 21:38:46
● 2026-02-14 20:00:20
β—‹ 2026-07-02 05:35:18
● 2026-07-02 07:30:44
● 2026-07-27 12:44:48
●A2606:4700:3032::ac43:86882026-06-27 β†’ 2026-07-27 Β· 5 obs
β—‹ 2026-02-14 20:00:20
● 2026-06-27 05:19:42
β—‹ 2026-07-02 05:35:18
● 2026-07-02 07:30:44
● 2026-07-27 12:44:48
β—‹A2606:4700:3033::ac43:86882026-02-14 β†’ 2026-02-14 Β· 4 obs
β—‹ 2017-09-10 21:38:46
● 2026-02-14 20:00:20
β—‹ 2026-06-27 05:19:42
β—‹ 2026-07-27 12:44:48
β—‹A72.52.4.1202015-07-08 β†’ 2017-01-17 Β· 5 obs
β—‹ 2008-11-24 00:28:26
● 2015-07-08 15:43:56
● 2017-01-17 21:56:44
β—‹ 2017-05-09 20:49:02
β—‹ 2026-07-27 12:44:48
β—‹A74.52.124.22008-11-24 β†’ 2008-11-24 Β· 3 obs
● 2008-11-24 00:28:26
β—‹ 2015-07-08 15:43:56
β—‹ 2026-07-27 12:44:48
β—‹A88.99.0.2202017-05-09 β†’ 2017-09-10 Β· 5 obs
β—‹ 2017-01-17 21:56:44
● 2017-05-09 20:49:02
● 2017-09-10 21:38:46
β—‹ 2026-02-14 20:00:20
β—‹ 2026-07-27 12:44:48

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ruc.tld-servers.ru, e.dns.ripn.net, b.dns.ripn.net, f.dns.ripn.net...-
worms.rugabe.ns.cloudflare.com, amy.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.58.101

NS records: gabe.ns.cloudflare.com, amy.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for worms.ru (unsigned zone)

⏱️ Timing

Total: 803ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.25.202, 172.67.134.136
AAAA22606:4700:3032::ac43:8688, 2606:4700:3032::6815:19ca
NS2amy.ns.cloudflare.com, gabe.ns.cloudflare.com
MX1mx.yandex.net (pri: 10)
TXT13ad226f4ba9ddfb077cb0bdcfaa6d6307cd51ed6
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1amy.ns.cloudflare.com dns.cloudflare.com

Analysis

IP Addresses

worms.ru points to the four IP addresses 104.21.25.202, 172.67.134.136, 2606:4700:3032::6815:19ca and 2606:4700:3032::ac43:8688.

cschaoshang.com, www.sbmh.shop, hg3869.com plus two other host names have IP numbers in common with worms.ru.

Name Servers

Two name servers handle the delegation for worms.ru: amy.ns.cloudflare.com and gabe.ns.cloudflare.com.

The name server configuration of worms.ru is shared with other domains, for instance showtimes.me, kobeteppanyaki.com.au, hektikcaraudio.com and two others.

At least some of worms.ru's name servers are shared with other domains, for example noresco.at, razan.ps, arrangement.world and two more.

These name servers tend to be deployed in combination with the name servers byron.ns.cloudflare.com and fish.ns.cloudflare.com.

Hosts with 6 IP addresses each:

amy.ns.cloudflare.com resolves to 108.162.192.101, 172.64.32.101 and 173.245.58.101 among others, with 3 other IP addresses in total.

gabe.ns.cloudflare.com resolves to 108.162.193.114, 172.64.33.114 and 173.245.59.114 among others, with 3 other IP addresses in total.

Mail Servers

worms.ru uses one mail server β€” mx.yandex.net.

The mail server setup of worms.ru matches that of other domains such as alivotec.ru, bayrakteknik.com, kino-polyarnyj.ru and two others.

At least some of the mail servers used by worms.ru are shared with other domains: alpu-tech.com, aytepe.biz, tplinks.com and two others among them.

mx.yandex.net directs to two IP numbers, 77.88.21.249 and 2a02:6b8::311.