`ncivps.org`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:bb75^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:20cb^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.32.203^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.187.117^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`emerson.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c60^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emerson.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c360^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`emerson.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2360^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`emerson.ns.cloudflare.com`
		A	108.162.195.96^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emerson.ns.cloudflare.com`
		A	162.159.44.96^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emerson.ns.cloudflare.com`
		A	172.64.35.96^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emerson.ns.cloudflare.com`
NS	`linda.ns.cloudflare.com`
		A	2606:4700:50::adf5:3afa^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0fa^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`linda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20fa^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`linda.ns.cloudflare.com`
		A	108.162.192.250^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	172.64.32.250^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	173.245.58.250^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.32.203, 172.67.187.117
		IPv6 hints	2606:4700:3031::ac43:bb75, 2606:4700:3034::6815:20cb
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=125, name=cloudflare-ech.com
SOA	`emerson.ns.cloudflare.com`dns@cloudflare.com serial=2408460419

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1785600142

⚠️ On DNS blocklist: tif

Subdomains

mirai.ncivps.org

zeus.ncivps.org

trickbot.ncivps.org

notpetya.ncivps.org

nimda.ncivps.org

sasser.ncivps.org

codered.ncivps.org

gozi.ncivps.org

ryuk.ncivps.org

www.ncivps.org

locky.ncivps.org

shamoon.ncivps.org

blacklotus.ncivps.org

melissa.ncivps.org

hack.ncivps.org

conti.ncivps.org

formbook.ncivps.org

mydoom.ncivps.org

klez.ncivps.org

connect.ncivps.org

azorult.ncivps.org

sobig.ncivps.org

agenttesla.ncivps.org

blaster.ncivps.org

hermeticwiper.ncivps.org

revil.ncivps.org

malware.ncivps.org

socgholish.ncivps.org

sodinokibi.ncivps.org

zbot.ncivps.org

fakeupdates.ncivps.org

invasive.ncivps.org

stuxnet.ncivps.org

rat.ncivps.org

client.ncivps.org

triton.ncivps.org

cryptolocker.ncivps.org

cl0p.ncivps.org

gootloader.ncivps.org

emotet.ncivps.org

nanocore.ncivps.org

clop.ncivps.org

dridex.ncivps.org

lokibot.ncivps.org

ursnif.ncivps.org

remote.ncivps.org

industroyer.ncivps.org

trisis.ncivps.org

gh0st.ncivps.org

qbot.ncivps.org

wannacry.ncivps.org

iloveyou.ncivps.org

darkside.ncivps.org

qakbot.ncivps.org

conficker.ncivps.org

remcos.ncivps.org

hacker.ncivps.org

downadup.ncivps.org

Same first word

ncivps.org

Similar names

pinsvc.com

svipcn.com

invcsp.com

vsnpic.com

vnpics.com

pinsvc.net

cisvpn.com

spincv.com

pvsinc.jp

picsnv.com

vpsinc.net

sinpvc.com

vspinc.com

cisvpn.xyz

pvsinc.com

csivpn.com

vpsinc.com

vpsnic.com

vspinc.biz

cvinsp.com

pvsinc.net

cvpins.com

svpinc.com

ncsvip.com

spvinc.com

DNS History

12 records (6 active, 6 former)

●NSemerson.ns.cloudflare.com2026-07-07 → 2026-08-01 · 2 obs

● 2026-07-07 10:18:42
● 2026-08-01 16:40:30

●NSlinda.ns.cloudflare.com2026-07-07 → 2026-08-01 · 2 obs

● 2026-07-07 10:18:42
● 2026-08-01 16:40:30

●A104.21.32.2032026-07-12 → 2026-08-01 · 3 obs

○ 2026-07-07 14:06:20
● 2026-07-12 17:37:54
● 2026-08-01 16:40:30

●A172.67.187.1172026-07-12 → 2026-08-01 · 3 obs

○ 2026-07-07 14:06:20
● 2026-07-12 17:37:54
● 2026-08-01 16:40:30

○A188.114.96.02026-07-07 → 2026-07-07 · 3 obs

● 2026-07-07 10:18:42
○ 2026-07-12 17:37:54
○ 2026-08-01 16:40:30

○A188.114.97.02026-07-07 → 2026-07-07 · 3 obs

● 2026-07-07 10:18:42
○ 2026-07-12 17:37:54
○ 2026-08-01 16:40:30

●A2606:4700:3031::ac43:bb752026-07-12 → 2026-08-01 · 3 obs

○ 2026-07-07 14:06:20
● 2026-07-12 17:37:54
● 2026-08-01 16:40:30

●A2606:4700:3034::6815:20cb2026-07-12 → 2026-08-01 · 3 obs

○ 2026-07-07 14:06:20
● 2026-07-12 17:37:54
● 2026-08-01 16:40:30

○A2a06:98c1:3120::2026-07-07 → 2026-07-07 · 4 obs

○ 2026-07-07 10:18:42
● 2026-07-07 14:06:20
○ 2026-07-12 17:37:54
○ 2026-08-01 16:40:30

○A2a06:98c1:3120::42026-07-07 → 2026-07-07 · 3 obs

● 2026-07-07 10:18:42
○ 2026-07-07 14:06:20
○ 2026-08-01 16:40:30

○A2a06:98c1:3121::2026-07-07 → 2026-07-07 · 4 obs

○ 2026-07-07 10:18:42
● 2026-07-07 14:06:20
○ 2026-07-12 17:37:54
○ 2026-08-01 16:40:30

○A2a06:98c1:3121::42026-07-07 → 2026-07-07 · 3 obs

● 2026-07-07 10:18:42
○ 2026-07-07 14:06:20
○ 2026-08-01 16:40:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b0.org.afilias-nst.org, d0.org.afilias-nst.org, b2.org.afilias-nst.org	-
ncivps.org	linda.ns.cloudflare.com, emerson.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.35.96

NS records: linda.ns.cloudflare.com, emerson.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ncivps.org (unsigned zone)

⏱️ Timing

Total: 373ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.187.117, 104.21.32.203`
AAAA	2	`2606:4700:3031::ac43:bb75, 2606:4700:3034::6815:20cb`
NS	2	`emerson.ns.cloudflare.com, linda.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`emerson.ns.cloudflare.com dns.cloudflare`

Analysis

Hierarchy

The host names mirai.ncivps.org, zeus.ncivps.org, trickbot.ncivps.org, notpetya.ncivps.org and nimda.ncivps.org — among a few others — fall under the parent domain ncivps.org.

IP Addresses

ncivps.org points to the four IP addresses 104.21.32.203, 172.67.187.117, 2606:4700:3031::ac43:bb75 and 2606:4700:3034::6815:20cb.

Additional host names — rockinghorsechicago.com, centroabakadabra.com, sintonizate.com and two others — share IP numbers with ncivps.org.

Name Servers

DNS delegation for ncivps.org points to two name servers: emerson.ns.cloudflare.com and linda.ns.cloudflare.com.

ncivps.org shares its name server setup with other domains, including rock-agent.com, teknikofisim.com, soundzoneae.com and two others.

At least some of ncivps.org's name servers are shared with other domains, for example partyorgy.live, 4fleetgroup.com, thembstore.com and two more.

These name servers are often deployed together with the name servers nia.ns.cloudflare.com, jarred.ns.cloudflare.com, trevor.ns.cloudflare.com and liv.ns.cloudflare.com.

Host names with 6 IP numbers:

emerson.ns.cloudflare.com has IP addresses 108.162.195.96, 162.159.44.96 and 172.64.35.96, plus 3 other.

linda.ns.cloudflare.com has IP addresses 108.162.192.250, 172.64.32.250 and 173.245.58.250, plus 3 other.

ncivps.org - robtex.com

ncivps.org

org

Subdomains

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

Hierarchy

IP Addresses

Name Servers

`ncivps.org`

`org`