🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ransomphp.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:9261^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3031::6815:2f5d^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.47.93^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.146.97^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bart.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b47^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c147^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bart.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2147^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bart.ns.cloudflare.com`
		A	108.162.193.71^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	172.64.33.71^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	173.245.59.71^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
NS	`lana.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ab6^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lana.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0b6^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lana.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20b6^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lana.ns.cloudflare.com`
		A	108.162.192.182^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lana.ns.cloudflare.com`
		A	172.64.32.182^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lana.ns.cloudflare.com`
		A	173.245.58.182^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lana.ns.cloudflare.com`
TXT	`v=spf1 -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.47.93, 172.67.146.97
		IPv6 hints	2606:4700:3030::ac43:9261, 2606:4700:3031::6815:2f5d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=234, name=cloudflare-ech.com
SOA	`bart.ns.cloudflare.com`dns@cloudflare.com serial=2411361459

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

ransomphp.dev

Similar names

snapmorph.com

morphsnap.app

snapmorph.app

morphsnap.com

Previous names

ranku.dev

rankwise.dev

rankworks.dev

ranmeth.dev

rann.dev

ranna.dev

rannagi.dev

rannes.dev

ranni.dev

rannie.dev

rannoch.dev

rannu.dev

rannychin.dev

rano.dev

ranolp.dev

ranq.dev

ranqinxz.dev

ranran.dev

ranrok.dev

ransack.dev

Next names

ransomware.dev

ranst.dev

ransys.dev

ranta.dev

rantai.dev

rantaitoto.dev

rantanen.dev

ranti.dev

ranto.dev

ranton.dev

rants.dev

rantumondal.dev

rantunes.dev

ranty.dev

ranu.dev

ranuka.dev

ranvir.dev

ranweb.dev

ranwkim.dev

DNS History

10 records (6 active, 4 former)

●NSbart.ns.cloudflare.com2026-08-31 → 2026-09-06 · 2 obs

● 2026-08-31 11:25:40
● 2026-09-06 17:28:34

●NSlana.ns.cloudflare.com2026-08-31 → 2026-09-06 · 2 obs

● 2026-08-31 11:25:40
● 2026-09-06 17:28:34

●A104.21.47.932026-09-05 → 2026-09-06 · 3 obs

○ 2026-08-31 11:25:40
● 2026-09-05 17:29:10
● 2026-09-06 17:28:34

●A172.67.146.972026-09-05 → 2026-09-06 · 3 obs

○ 2026-08-31 11:25:40
● 2026-09-05 17:29:10
● 2026-09-06 17:28:34

○A188.114.96.02026-08-31 → 2026-08-31 · 3 obs

● 2026-08-31 11:25:40
○ 2026-09-05 17:29:10
○ 2026-09-06 17:28:34

○A188.114.97.02026-08-31 → 2026-08-31 · 3 obs

● 2026-08-31 11:25:40
○ 2026-09-05 17:29:10
○ 2026-09-06 17:28:34

●A2606:4700:3030::ac43:92612026-09-05 → 2026-09-06 · 3 obs

○ 2026-08-31 11:25:40
● 2026-09-05 17:29:10
● 2026-09-06 17:28:34

●A2606:4700:3031::6815:2f5d2026-09-05 → 2026-09-06 · 3 obs

○ 2026-08-31 11:25:40
● 2026-09-05 17:29:10
● 2026-09-06 17:28:34

○A2a06:98c1:3120::2026-08-31 → 2026-08-31 · 3 obs

● 2026-08-31 11:25:40
○ 2026-09-05 17:29:10
○ 2026-09-06 17:28:34

○A2a06:98c1:3121::2026-08-31 → 2026-08-31 · 3 obs

● 2026-08-31 11:25:40
○ 2026-09-05 17:29:10
○ 2026-09-06 17:28:34

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
ransomphp.dev	lana.ns.cloudflare.com, bart.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.71

NS records: lana.ns.cloudflare.com, bart.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ransomphp.dev (unsigned zone)

⏱️ Timing

Total: 509ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.146.97, 104.21.47.93`
AAAA	2	`2606:4700:3030::ac43:9261, 2606:4700:3031::6815:2f5d`
NS	2	`bart.ns.cloudflare.com, lana.ns.cloudflare.com`
TXT	1	`v=spf1 -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bart.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

ransomphp.dev resolves to four IP addresses: 104.21.47.93, 172.67.146.97, 2606:4700:3030::ac43:9261 and 2606:4700:3031::6815:2f5d.

solestash.fit, yiuhj.sui4c03zvj.workers.dev, dolarbiru.site and two other host names share IP numbers with ransomphp.dev.

Name Servers

DNS delegation for ransomphp.dev points to two name servers: bart.ns.cloudflare.com and lana.ns.cloudflare.com.

ransomphp.dev uses the same name servers as several other domains — among them photosdeeplife.ru, mikhaillermontov.com, tasair.com.au and two more.

ransomphp.dev partially shares its NS delegation with several other domains, including excelso.ca, ki888xx.com, hidroviasegura.com and two others.

These name servers regularly co-occur with the name servers sevki.ns.cloudflare.com, maria.ns.cloudflare.com and bradley.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

bart.ns.cloudflare.com has IP addresses 108.162.193.71, 172.64.33.71 and 173.245.59.71, plus 3 other.

lana.ns.cloudflare.com has IP addresses 108.162.192.182, 172.64.32.182 and 173.245.58.182, plus 3 other.

ransomphp.dev - robtex.com

ransomphp.dev

dev

Same first word

Similar names

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

`ransomphp.dev`

`dev`