fakemessenger.com - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

fakemessenger.com

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:cabcπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::6815:5539πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.85.57Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.202.188πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSjeff.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b7cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjeff.ns.cloudflare.com
A2803:f800:50::6ca2:c17cπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjeff.ns.cloudflare.com
A2a06:98c1:50::ac40:217cπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjeff.ns.cloudflare.com
A108.162.193.124πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjeff.ns.cloudflare.com
A172.64.33.124πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjeff.ns.cloudflare.com
A173.245.59.124πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjeff.ns.cloudflare.com
NSsummer.ns.cloudflare.com
A2606:4700:50::a29f:2609πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsummer.ns.cloudflare.com
A2803:f800:50::6ca2:c209πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsummer.ns.cloudflare.com
A2a06:98c1:50::ac40:2209πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRsummer.ns.cloudflare.com
A108.162.194.9πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsummer.ns.cloudflare.com
A162.159.38.9Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsummer.ns.cloudflare.com
A172.64.34.9πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsummer.ns.cloudflare.com
MXmx1.mail.ovh.net ⭐
A188.165.36.237πŸ‡«πŸ‡· OVH188.165.0.0/16 ISP Paris, France
PTRmx1.mail.ovh.net
MXmx2.mail.ovh.net(5)
A87.98.160.167πŸ‡«πŸ‡· OVH87.98.128.0/17 ISP Paris, France
PTRmx2.mail.ovh.net
MXmx3.mail.ovh.net(100)
A91.121.53.175πŸ‡«πŸ‡· OVH91.121.0.0/16 ISP Paris, France
PTRmx3.mail.ovh.net
TXTgoogle-site-verification=wvHoCPXbqpvSoW8hhjOc39YWFb4ik3rY8x8xBzBidvQ
TXTv=spf1 include:mx.ovh.com ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.85.57, 172.67.202.188
IPv6 hints2606:4700:3031::ac43:cabc, 2606:4700:3033::6815:5539
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=54, name=cloudflare-ech.com
SOAjeff.ns.cloudflare.comdns@cloudflare.com serial=2408577584

com

Same first word

DNS History

22 records (9 active, 13 former)

201820192020202120222023202420252026NSjeff.ns.cloudflare.comsummer.ns.cloudflare.comdns110.ovh.netns110.ovh.netns35.domaincontrol.comns36.domaincontrol.comMXmx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.netmailstore1.secureserver.netsmtp.secureserver.netA104.21.85.57172.67.202.1882606:4700:3031::ac43:cabc2606:4700:3033::6815:5539188.114.96.0188.114.97.02001:41d0:301:12::302a06:98c1:3120::2a06:98c1:3121::50.63.202.6391.134.177.228
β—‹NSdns110.ovh.net2026-03-25 β†’ 2026-03-25 Β· 4 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
β—‹ 2026-07-04 13:46:38
β—‹ 2026-08-16 21:03:20
●NSjeff.ns.cloudflare.com2026-07-04 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
● 2026-08-16 21:03:20
β—‹NSns110.ovh.net2026-03-25 β†’ 2026-03-25 Β· 4 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
β—‹ 2026-07-04 13:46:38
β—‹ 2026-08-16 21:03:20
β—‹NSns35.domaincontrol.com2017-05-07 β†’ 2017-05-07 Β· 3 obs
● 2017-05-07 23:55:48
β—‹ 2026-03-25 15:51:16
β—‹ 2026-08-16 21:03:20
β—‹NSns36.domaincontrol.com2017-05-07 β†’ 2017-05-07 Β· 3 obs
● 2017-05-07 23:55:48
β—‹ 2026-03-25 15:51:16
β—‹ 2026-08-16 21:03:20
●NSsummer.ns.cloudflare.com2026-07-04 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
● 2026-08-16 21:03:20
β—‹MXmailstore1.secureserver.net2017-05-07 β†’ 2017-05-07 Β· 3 obs
● 2017-05-07 23:55:48
β—‹ 2026-03-25 15:51:16
β—‹ 2026-08-16 21:03:20
●MXmx1.mail.ovh.net2026-03-25 β†’ 2026-08-16 Β· 3 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
● 2026-08-16 21:03:20
●MXmx2.mail.ovh.net2026-03-25 β†’ 2026-08-16 Β· 3 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
● 2026-08-16 21:03:20
●MXmx3.mail.ovh.net2026-03-25 β†’ 2026-08-16 Β· 3 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
● 2026-08-16 21:03:20
β—‹MXsmtp.secureserver.net2017-05-07 β†’ 2017-05-07 Β· 3 obs
● 2017-05-07 23:55:48
β—‹ 2026-03-25 15:51:16
β—‹ 2026-08-16 21:03:20
●A104.21.85.572026-07-16 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-07-04 13:46:38
● 2026-07-16 03:29:20
● 2026-08-16 21:03:20
●A172.67.202.1882026-07-16 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-07-04 13:46:38
● 2026-07-16 03:29:20
● 2026-08-16 21:03:20
β—‹A188.114.96.02026-07-04 β†’ 2026-07-04 Β· 4 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
β—‹ 2026-07-16 03:29:20
β—‹ 2026-08-16 21:03:20
β—‹A188.114.97.02026-07-04 β†’ 2026-07-04 Β· 4 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
β—‹ 2026-07-16 03:29:20
β—‹ 2026-08-16 21:03:20
β—‹A2001:41d0:301:12::302026-03-25 β†’ 2026-03-25 Β· 4 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
β—‹ 2026-07-04 13:46:38
β—‹ 2026-08-16 21:03:20
●A2606:4700:3031::ac43:cabc2026-07-16 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-07-04 13:46:38
● 2026-07-16 03:29:20
● 2026-08-16 21:03:20
●A2606:4700:3033::6815:55392026-07-16 β†’ 2026-08-16 Β· 3 obs
β—‹ 2026-07-04 13:46:38
● 2026-07-16 03:29:20
● 2026-08-16 21:03:20
β—‹A2a06:98c1:3120::2026-07-04 β†’ 2026-07-04 Β· 4 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
β—‹ 2026-07-16 03:29:20
β—‹ 2026-08-16 21:03:20
β—‹A2a06:98c1:3121::2026-07-04 β†’ 2026-07-04 Β· 4 obs
β—‹ 2026-03-25 15:51:16
● 2026-07-04 13:46:38
β—‹ 2026-07-16 03:29:20
β—‹ 2026-08-16 21:03:20
β—‹A50.63.202.632017-05-07 β†’ 2017-05-07 Β· 3 obs
● 2017-05-07 23:55:48
β—‹ 2026-03-25 15:51:16
β—‹ 2026-08-16 21:03:20
β—‹A91.134.177.2282026-03-25 β†’ 2026-03-25 Β· 4 obs
β—‹ 2017-05-07 23:55:48
● 2026-03-25 15:51:16
β—‹ 2026-07-04 13:46:38
β—‹ 2026-08-16 21:03:20

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
fakemessenger.comjeff.ns.cloudflare.com, summer.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.193.124

NS records: jeff.ns.cloudflare.com, summer.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for fakemessenger.com (unsigned zone)

⏱️ Timing

Total: 155ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.202.188, 104.21.85.57
AAAA22606:4700:3031::ac43:cabc, 2606:4700:3033::6815:5539
NS2jeff.ns.cloudflare.com, summer.ns.cloudflare.com
MX3mx1.mail.ovh.net (pri: 1), mx3.mail.ovh.net (pri: 100)...
TXT2google-site-verification=wvHoCPXbqpvSoW8, v=spf1 include:mx.ovh.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1jeff.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (jeff.ns.cloudflare.com, jeff.ns.cloudflare.com, jeff.ns.cloudflare.com...)

Analysis

IP Addresses

fakemessenger.com directs to four IP numbers, which are 104.21.85.57, 172.67.202.188, 2606:4700:3031::ac43:cabc and 2606:4700:3033::6815:5539.

Two other host names, along with afonconwycottage.co.uk, sjg-creative.com and 5a505f8d6a62.domainwholesaler.com, also share IP numbers with fakemessenger.com.

Name Servers

DNS delegation for fakemessenger.com points to two name servers: jeff.ns.cloudflare.com and summer.ns.cloudflare.com.

fakemessenger.com shares its NS records with other domains, for example imgtools.co, picmix.com, watermark.pro and two others.

There is at least partial name server overlap between fakemessenger.com and other domains β€” edautobot.com, smartdev.cl, landmarkforge.co.uk and two more among them.

These name servers frequently co-occur with the name servers michael.ns.cloudflare.com and eoin.ns.cloudflare.com.

DNS names with 6 IP addresses:

jeff.ns.cloudflare.com has IP addresses 108.162.193.124, 172.64.33.124 and 173.245.59.124, plus 3 other.

summer.ns.cloudflare.com has IP addresses 108.162.194.9, 162.159.38.9 and 172.64.34.9, plus 3 other.

Mail Servers

Incoming mail for fakemessenger.com is delivered via three mail servers: mx1.mail.ovh.net, mx2.mail.ovh.net and mx3.mail.ovh.net.

There is at least a partial MX overlap between fakemessenger.com and other domains, including mutuelle-medicis.eu, exoty.net, apuntes.net and two others.

These mail servers are routinely seen in conjunction with the mail servers mx4.mail.ovh.net and mx0.mail.ovh.net.

mx1.mail.ovh.net, mx2.mail.ovh.net and mx3.mail.ovh.net all have one IP address each β€” mx1.mail.ovh.net directs to 188.165.36.237, mx2.mail.ovh.net directs to 87.98.160.167 and mx3.mail.ovh.net directs to 91.121.53.175.