🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`worm.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:abb8^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:3fc3^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.63.195^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.171.184^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`aliza.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2637^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c237^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aliza.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2237^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aliza.ns.cloudflare.com`
		A	108.162.194.55^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	162.159.38.55^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
		A	172.64.34.55^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aliza.ns.cloudflare.com`
NS	`max.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b84^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c184^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`max.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2184^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`max.ns.cloudflare.com`
		A	108.162.193.132^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	172.64.33.132^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
		A	173.245.59.132^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`max.ns.cloudflare.com`
MX	`mail.protonmail.ch` ⭐
		A	176.119.200.128^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mail.protonmail.ch`
		A	185.70.42.128^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mail.protonmail.ch`
		A	185.205.70.128^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mail.protonmail.ch`
MX	`mailsec.protonmail.ch`⁽²⁰⁾
		A	176.119.200.129^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.70.42.129^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.205.70.129^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mailsec.protonmail.ch`
TXT	`protonmail-verification=c54927c2b31d2d60683368cadebfe4c906cb7d89`
TXT	`v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.63.195, 172.67.171.184
		IPv6 hints	2606:4700:3032::ac43:abb8, 2606:4700:3033::6815:3fc3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=186, name=cloudflare-ech.com
SOA	`aliza.ns.cloudflare.com`dns@cloudflare.com serial=2412435498

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

worm.ovh

worm.cz

worm.moe

worm.(0x736578)

worm.ca

worm.nl

worm.nu

worm.info

worm.farm

worm.at

worm.ir

worm.is

worm.pet

worm.im

worm.com.cn

worm.pink

worm.co.in

worm.me

worm.wtf

worm.co.uk

worm.zip

worm.finance

worm.live

worm.so

worm.cool

worm.ch

worm.horse

worm.com.ph

worm.zone

worm.org

worm.sh

worm.co

worm.it

worm.exchange

worm.dance

worm.canva-apps.cn

worm.ae

worm.fr

worm.com.pl

worm.be

worm.ly

worm.su

worm.ee

worm.tv

worm.town

worm.net

worm.com

worm.de

worm.cn

worm.dev

worm.money

worm.com.br

worm.eu

worm.media

worm.pl

worm.lol

worm.me.uk

worm.social

worm.co.at

worm.boutique

worm.trade

worm.biz

worm.group

worm.city

worm.com.au

worm.kasserver.com

worm.us

worm.org.ua

worm.ws

Similar names

womr.ru

romw.ph

mrow.lol

omrw.ru

rmwo.com

wmor.net

wrmo.com

orwm.org

wrom.com

mwro.com

mowr.org

romw.co

mowr.gov.iq

mowr.com

orwm.buzz

morw.de

romw.com.br

rwom.cn

mowr.com.au

rowm.org

mowr.gov.in

wrmo.net

mowr.shop

wrom.eu

mrow.de

morw.net

romw.com

wmor.com

ormw.com

rmwo.shop

mrow.ca

wmor.de

mwor.de

orwm.com

rwmo.com

mrow.vg

mrow.com

rowm.info

wrom.ru

wmor.us

mrow.pl

mwor.com

mrow.org

mrow.tech

rwmo.cz

rowm.app

rmwo.org

wmro.nl

rowm.co

wrom.de

mwro.nl

mwor.cn

wrom.net

rwmo.eu

Previous names

Next names

wormgpt.dev

wormspace.dev

woro.dev

worobiec.dev

worstpractices.dev

worthcap.dev

worthclark.dev

worthington.dev

worthle.dev

worthy.dev

wortinger.dev

wortpreis.dev

worxlab.dev

worxora.dev

worxpace.dev

worxy.dev

woryo.dev

wosa.dev

wosephjeber.dev

wosg.dev

DNS History

12 records (8 active, 4 former)

●NSaliza.ns.cloudflare.com2026-08-27 → 2026-08-28 · 2 obs

● 2026-08-27 01:47:36
● 2026-08-28 07:52:26

●NSmax.ns.cloudflare.com2026-08-27 → 2026-08-28 · 2 obs

● 2026-08-27 01:47:36
● 2026-08-28 07:52:26

●MXmail.protonmail.ch2026-08-27 → 2026-08-28 · 2 obs

● 2026-08-27 01:47:36
● 2026-08-28 07:52:26

●MXmailsec.protonmail.ch2026-08-27 → 2026-08-28 · 2 obs

● 2026-08-27 01:47:36
● 2026-08-28 07:52:26

●A104.21.63.1952026-08-27 → 2026-08-28 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-08-28 07:52:26

●A172.67.171.1842026-08-27 → 2026-08-28 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-08-28 07:52:26

○A188.114.96.02026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-08-28 07:52:26

○A188.114.97.02026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-08-28 07:52:26

●A2606:4700:3032::ac43:abb82026-08-27 → 2026-08-28 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-08-28 07:52:26

●A2606:4700:3033::6815:3fc32026-08-27 → 2026-08-28 · 3 obs

○ 2026-08-27 01:47:36
● 2026-08-27 12:13:00
● 2026-08-28 07:52:26

○A2a06:98c1:3120::2026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-08-28 07:52:26

○A2a06:98c1:3121::2026-08-27 → 2026-08-27 · 3 obs

● 2026-08-27 01:47:36
○ 2026-08-27 12:13:00
○ 2026-08-28 07:52:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	-
worm.dev	max.ns.cloudflare.com, aliza.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.194.55

NS records: max.ns.cloudflare.com, aliza.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for worm.dev (unsigned zone)

⏱️ Timing

Total: 506ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.63.195, 172.67.171.184`
AAAA	2	`2606:4700:3033::6815:3fc3, 2606:4700:3032::ac43:abb8`
NS	2	`aliza.ns.cloudflare.com, max.ns.cloudflare.com`
MX	2	`mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)`
TXT	2	`protonmail-verification=c54927c2b31d2d60, v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aliza.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

worm.dev directs to four IP numbers, which are 104.21.63.195, 172.67.171.184, 2606:4700:3032::ac43:abb8 and 2606:4700:3033::6815:3fc3.

uplift-g2p.online, mail.ulto.ca, kx1.buzz plus two other host names have IP numbers in common with worm.dev.

Name Servers

worm.dev has two authoritative name servers — aliza.ns.cloudflare.com and max.ns.cloudflare.com.

The name server configuration of worm.dev is shared with other domains, for instance proxy-openai-api-exj.pages.dev, 3493832553.workers.dev, fkrsb796.pages.dev and two others.

There is at least partial name server overlap between worm.dev and other domains — np24.net, yousung.kim, easy-bookings-ssl.co.uk and two more among them.

These name servers are routinely deployed together with the name servers coby.ns.cloudflare.com.

Hosts with 6 IP addresses each:

aliza.ns.cloudflare.com points to 108.162.194.55, 162.159.38.55, 172.64.34.55 and 3 other IP addresses.

max.ns.cloudflare.com points to 108.162.193.132, 172.64.33.132, 173.245.59.132 and 3 other IP addresses.

Mail Servers

worm.dev uses two mail servers, mail.protonmail.ch and mailsec.protonmail.ch.

The mail server setup of worm.dev matches that of other domains such as grindshell.com, vouch.sh, dawid.me and two others.

At least some of the mail servers used by worm.dev are shared with other domains: cuttingedgehauntedhouse.com, rogi.ch, skunkgear.com and two others among them.

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.

worm.dev - robtex.com

worm.dev

dev

Same first word

Similar names

Previous names

Next names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`worm.dev`

`dev`