malware.stope40.org - robtex.com

malware.stope40.org

DNSSEC⚠️ Not signed
A2606:4700::6812:e1🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700::6812:1e1🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.0.225Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.1.225Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.18.0.225, 104.18.1.225
IPv6 hints2606:4700::6812:e1, 2606:4700::6812:1e1
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=198, name=cloudflare-ech.com

stope40.org

DNSSEC⚠️ Not signed
A2606:4700::6812:e1🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700::6812:1e1🇺🇸 Cloudflare2606:4700::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.0.225Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.18.1.225Cloudflare104.18.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSharley.ns.cloudflare.com ⭐
NSrihana.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.18.0.225, 104.18.1.225
IPv6 hints2606:4700::6812:e1, 2606:4700::6812:1e1
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=198, name=cloudflare-ech.com
SOAharley.ns.cloudflare.comdns@cloudflare.com serial=2403563111
⚠️ On DNS blocklist: tif
⚠️ On DNS blocklist: tif

Same first word

malware.com
malware.solutions
malware.business
malware.services
malware.eu
malware.guide
malware.net
malware.in
malware.pl
malware.fox
malware.be
malware.(0x706f726e)
malware.exchange
malware.today
malware.cn
malware.cc
malware.biz
malware.center
malware.se
malware.farm
malware.sx
malware.wtf
malware.cl
malware.directory
malware.su
malware.expert
malware.builders
malware.win
malware.mobi
malware.onl
malware.com.br
malware.zip
malware.ai
malware.xyz
malware.email
malware.ru
malware.guru
malware.tv
malware.fr
malware.ro
malware.nu
malware.lu
malware.community
malware.org
malware.re
malware.me
malware.watch
malware.no
malware.cz
malware.careers
malware.forum
malware.report
malware.es
malware.at
malware.exposed
malware.hosting

Similar names

reamlaw.com
meralaw.com
walmare.com
marwael.fr
malwear.wtf
amlware.com
elmarwa.com
malwear.com
amrelaw.com
rawmale.com
lawream.com
mawlare.net
wealarm.com
malwear.co
malwear.org
realawm.com
amerlaw.com
reamlaw.net

DNS History

4 records (4 active, 0 former)

A104.18.0.225104.18.1.2252606:4700::6812:1e12606:4700::6812:e1
●A104.18.0.2252026-03-12 → 2026-05-13 · 2 obs
● 2026-03-12 20:50:06
● 2026-05-13 07:50:16
●A104.18.1.2252026-03-12 → 2026-05-13 · 2 obs
● 2026-03-12 20:50:06
● 2026-05-13 07:50:16
●A2606:4700::6812:1e12026-03-12 → 2026-05-13 · 2 obs
● 2026-03-12 20:50:06
● 2026-05-13 07:50:16
●A2606:4700::6812:e12026-03-12 → 2026-05-13 · 2 obs
● 2026-03-12 20:50:06
● 2026-05-13 07:50:16

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
orgb0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org-
stope40.orgharley.ns.cloudflare.com, rihana.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.32.244

NS records: harley.ns.cloudflare.com, rihana.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for stope40.org (unsigned zone)

⏱️ Timing

Total: 1152ms | Queries: -

📄 Records

TypeCountSample Data
A2104.18.0.225, 104.18.1.225
AAAA22606:4700::6812:1e1, 2606:4700::6812:e1
HTTPS1{"priority":1,"target":".","alpn":["h3",

Analysis

IP Addresses

malware.stope40.org maps to four IP numbers: 2606:4700::6812:e1, 2606:4700::6812:1e1, 104.18.0.225 and 104.18.1.225.

other host names include grg5f8g7eewf8.com, stope40.org, login.tide.co, www.scp-ks.org and web.tide.co; they share IP numbers with malware.stope40.org.