nefarious.dev - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

nefarious.dev

DNSSEC🔒 Signed (DS record present)
A2606:4700:3032::ac43:db11🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:4e58🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.78.88Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.219.17🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmargo.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c90🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmargo.ns.cloudflare.com
A2803:f800:50::6ca2:c390🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmargo.ns.cloudflare.com
A2a06:98c1:50::ac40:2390🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmargo.ns.cloudflare.com
A108.162.195.144🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmargo.ns.cloudflare.com
A162.159.44.144Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmargo.ns.cloudflare.com
A172.64.35.144🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmargo.ns.cloudflare.com
NSroxy.ns.cloudflare.com
A2606:4700:50::adf5:3a8e🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroxy.ns.cloudflare.com
A2803:f800:50::6ca2:c08e🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRroxy.ns.cloudflare.com
A2a06:98c1:50::ac40:208e🇺🇸 Cloudflare2a06:98c1:50::/45
PTRroxy.ns.cloudflare.com
A108.162.192.142🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroxy.ns.cloudflare.com
A172.64.32.142🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroxy.ns.cloudflare.com
A173.245.58.142🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroxy.ns.cloudflare.com
MXroute2.mx.cloudflare.net ⭐
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
MXroute3.mx.cloudflare.net(16)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute1.mx.cloudflare.net(66)
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
TXTv=spf1 include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.78.88, 172.67.219.17
IPv6 hints2606:4700:3032::ac43:db11, 2606:4700:3036::6815:4e58
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=25, name=cloudflare-ech.com
SOAmargo.ns.cloudflare.comdns@cloudflare.com serial=2418428248

dev

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
🔒 HSTS Preload (+subdomains)

Same first word

nefarious.myqnapcloud.com
nefarious.global
nefarious.vip
nefarious.site
nefarious.info
nefarious.solutions
nefarious.com
nefarious.xyz
nefarious.synology.me
nefarious.actor
nefarious.es
nefarious.world
nefarious.net
nefarious.org.uk
nefarious.org
nefarious.email
nefarious.games
nefarious.pro
nefarious.de
nefarious.dev
nefarious.com.pk
nefarious.co
nefarious.ru
nefarious.com.au
nefarious.ca
nefarious.trading
nefarious.eu.org
nefarious.life
nefarious.uk
nefarious.win
nefarious.lol
nefarious.link
nefarious.studio
nefarious.zip
nefarious.lima-city.de
nefarious.eu
nefarious.co.uk
nefarious.technology
nefarious.si
nefarious.se
nefarious.club
nefarious.ph
nefarious.io
nefarious.sg

Similar names

nofairuse.com
earfusion.com
surfaineo.xyz
fusionera.ai
infousera.com
faireuons.com
enfarious.me
fusionera.cn
aisenfour.cn
finsaeuro.xyz
fournaise.fr
onfireusa.com
unfairseo.com
orainfuse.com
usefinora.app
fusionera.com
usefinora.site
eufrosina.com.br
erafusion.com
fusionera.co.in
anoserifu.blogspot.com
eurofinas.org
usefinroa.com
usefinora.com
aerfusion.com
eufrosina.com
fusionaer.de
fournaise.org
furnesiao.com
roseinufa.ru
fournaise.dk
eurofinsa.com
eufrosina.blog
fournaise.sg
eurofinas.com.ph
fournaise.net
reafusion.com
souferian.com
usefinaro.com
onesaifur.workers.dev
fusionare.com
finsaeuro.com
sofieraun.com
fournaise.info
fournaise.ca
fournaise.biz
neuroisaf.cl
einsofaur.com
forunesia.com
afinesour.com
fournaise.com

Previous names

neetfly.dev
neeth.dev
neethernet.dev
neetkee.dev
neeto.dev
neeuh.dev
neev-bakshi.dev
neev.dev
neevarp.dev
neevash.dev
neeve.dev
neevot.dev
neevu.dev
neex.dev
neexa.dev
neey.dev
neezer.dev
nef.dev
nefantaris.dev
nefario.dev

Next names

nefariouslabs.dev
nefarkitti.dev
nefe.dev
nefedov.dev
nefele.dev
nefer.dev
neferai.dev
nefersky.dev
nefes.dev
neffae.dev
neffc.dev
neffez.dev
nefflab.dev
nefflix.dev
neffy.dev
nefi-perez.dev
nefilopez.dev
nefio.dev
nefling.dev
nefo.dev

DNS History

13 records (9 active, 4 former)

NSmargo.ns.cloudflare.comroxy.ns.cloudflare.comMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.78.88172.67.219.172606:4700:3032::ac43:db112606:4700:3036::6815:4e58188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSmargo.ns.cloudflare.com2026-08-31 → 2026-11-06 · 2 obs
● 2026-08-31 11:00:14
● 2026-11-06 09:41:54
●NSroxy.ns.cloudflare.com2026-08-31 → 2026-11-06 · 2 obs
● 2026-08-31 11:00:14
● 2026-11-06 09:41:54
●MXroute1.mx.cloudflare.net2026-08-31 → 2026-11-06 · 2 obs
● 2026-08-31 11:00:14
● 2026-11-06 09:41:54
●MXroute2.mx.cloudflare.net2026-08-31 → 2026-11-06 · 2 obs
● 2026-08-31 11:00:14
● 2026-11-06 09:41:54
●MXroute3.mx.cloudflare.net2026-08-31 → 2026-11-06 · 2 obs
● 2026-08-31 11:00:14
● 2026-11-06 09:41:54
●A104.21.78.882026-09-01 → 2026-11-06 · 7 obs
○ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
○ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
○ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-11-06 09:41:54
●A172.67.219.172026-09-01 → 2026-11-06 · 7 obs
○ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
○ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
○ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-11-06 09:41:54
○A188.114.96.02026-08-31 → 2026-10-01 · 7 obs
● 2026-08-31 11:00:14
○ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
○ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
○ 2026-10-15 17:31:06
○ 2026-11-06 09:41:54
○A188.114.97.02026-08-31 → 2026-10-01 · 7 obs
● 2026-08-31 11:00:14
○ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
○ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
○ 2026-10-15 17:31:06
○ 2026-11-06 09:41:54
●A2606:4700:3032::ac43:db112026-09-01 → 2026-11-06 · 7 obs
○ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
○ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
○ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-11-06 09:41:54
●A2606:4700:3036::6815:4e582026-09-01 → 2026-11-06 · 7 obs
○ 2026-08-31 11:00:14
● 2026-09-01 19:12:38
○ 2026-09-08 01:22:04
● 2026-09-13 21:05:20
○ 2026-10-01 13:17:36
● 2026-10-15 17:31:06
● 2026-11-06 09:41:54
○A2a06:98c1:3120::2026-08-31 → 2026-10-01 · 7 obs
● 2026-08-31 11:00:14
○ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
○ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
○ 2026-10-15 17:31:06
○ 2026-11-06 09:41:54
○A2a06:98c1:3121::2026-08-31 → 2026-10-01 · 7 obs
● 2026-08-31 11:00:14
○ 2026-09-01 19:12:38
● 2026-09-08 01:22:04
○ 2026-09-13 21:05:20
● 2026-10-01 13:17:36
○ 2026-10-15 17:31:06
○ 2026-11-06 09:41:54

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
devns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com...-
nefarious.devroxy.ns.cloudflare.com, margo.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.192.142

NS records: roxy.ns.cloudflare.com, margo.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 934ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.219.17, 104.21.78.88
AAAA22606:4700:3036::6815:4e58, 2606:4700:3032::ac43:db11
NS2margo.ns.cloudflare.com, roxy.ns.cloudflare.com
MX3route2.mx.cloudflare.net (pri: 10), route3.mx.cloudflare.net (pri: 16)...
TXT1v=spf1 include:_spf.mx.cloudflare.net ~a
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1margo.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

nefarious.dev points to the four IP addresses 104.21.78.88, 172.67.219.17, 2606:4700:3032::ac43:db11 and 2606:4700:3036::6815:4e58.

Two other host names, along with bmwwinkel.nl, fourshield.com.br and trescoroas.rs.gov.br, also share IP numbers with nefarious.dev.

Name Servers

nefarious.dev is served by two delegated name servers, margo.ns.cloudflare.com and roxy.ns.cloudflare.com.

nefarious.dev shares its NS records with other domains, for example zhongziw7.com, marvin-spring96.workers.dev, hmjc8.com and two others.

There is at least partial name server overlap between nefarious.dev and other domains — lopez-n-alex.workers.dev, 190-intel-inc.pages.dev, curvyactive.au and two more among them.

These name servers are routinely deployed together with the name servers phoenix.ns.cloudflare.com.

DNS names with 6 IP addresses:

margo.ns.cloudflare.com carries IP addresses 108.162.195.144, 162.159.44.144 and 172.64.35.144, with 3 other addresses beyond those.

roxy.ns.cloudflare.com carries IP addresses 108.162.192.142, 172.64.32.142 and 173.245.58.142, with 3 other addresses beyond those.

Mail Servers

Incoming mail for nefarious.dev is delivered via three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

There is at least a partial MX overlap between nefarious.dev and other domains, including lookinglooking.com, postquotetalent.monster, regenra.in and two others.

DNS names with 6 IP addresses:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.