`spywarecops.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:29c6^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:c048^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.41.198^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.192.72^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`harlan.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cfa^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harlan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3fa^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`harlan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23fa^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`harlan.ns.cloudflare.com`
		A	108.162.195.250^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harlan.ns.cloudflare.com`
		A	162.159.44.250^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harlan.ns.cloudflare.com`
		A	172.64.35.250^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harlan.ns.cloudflare.com`
NS	`nena.ns.cloudflare.com`
		A	2606:4700:50::a29f:26a1^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nena.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2a1^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nena.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22a1^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nena.ns.cloudflare.com`
		A	108.162.194.161^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nena.ns.cloudflare.com`
		A	162.159.38.161^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nena.ns.cloudflare.com`
		A	172.64.34.161^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nena.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.41.198, 172.67.192.72
		IPv6	2606:4700:3031::6815:29c6, 2606:4700:3032::ac43:c048
SOA	`harlan.ns.cloudflare.com`dns@cloudflare.com serial=2399153739

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

WOT: SUSPICIOUS (2/100)

Same first word

spywarecops.com

DNS History

17 records (6 active, 11 former)

○NSa.share-dns.com2026-03-14 → 2026-03-14 · 3 obs

○ 2017-06-18 20:22:42
● 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○NSa8.share-dns.com2026-03-14 → 2026-03-14 · 3 obs

○ 2017-06-18 20:22:42
● 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○NSb.share-dns.net2026-03-14 → 2026-03-14 · 3 obs

○ 2017-06-18 20:22:42
● 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○NSb8.share-dns.net2026-03-14 → 2026-03-14 · 3 obs

○ 2017-06-18 20:22:42
● 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

●NSharlan.ns.cloudflare.com2026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

●NSnena.ns.cloudflare.com2026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

○NSns01.cashparking.com2015-07-23 → 2017-06-18 · 4 obs

● 2015-07-23 13:58:22
● 2017-06-18 20:22:42
○ 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○MX(root)2017-06-18 → 2017-06-18 · 4 obs

○ 2016-11-26 00:22:10
● 2017-06-18 20:22:42
○ 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○MX102017-06-18 → 2017-06-18 · 4 obs

○ 2016-11-26 00:22:10
● 2017-06-18 20:22:42
○ 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

○MXmailstore1.secureserver.net2015-07-23 → 2016-11-26 · 4 obs

● 2015-07-23 13:58:22
● 2016-11-26 00:22:10
○ 2017-06-18 20:22:42
○ 2026-03-17 00:03:16

○MXsmtp.secureserver.net2015-07-23 → 2016-11-26 · 4 obs

● 2015-07-23 13:58:22
● 2016-11-26 00:22:10
○ 2017-06-18 20:22:42
○ 2026-03-17 00:03:16

●A104.21.41.1982026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

○A156.245.79.2102026-03-14 → 2026-03-14 · 3 obs

○ 2017-06-18 20:22:42
● 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

●A172.67.192.722026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

○A184.168.221.962015-07-23 → 2017-06-18 · 4 obs

● 2015-07-23 13:58:22
● 2017-06-18 20:22:42
○ 2026-03-14 17:54:42
○ 2026-03-17 00:03:16

●A2606:4700:3031::6815:29c62026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

●A2606:4700:3032::ac43:c0482026-03-17 → 2026-03-17 · 2 obs

○ 2026-03-14 17:54:42
● 2026-03-17 00:03:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
spywarecops.com	nena.ns.cloudflare.com, harlan.ns.cloudflare.com	12 records

✅ Authoritative Response

Server: 108.162.195.250

NS records: nena.ns.cloudflare.com, harlan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for spywarecops.com (unsigned zone)

⏱️ Timing

Total: 123ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.41.198, 172.67.192.72`
AAAA	2	`2606:4700:3032::ac43:c048, 2606:4700:3031::6815:29c6`
NS	2	`harlan.ns.cloudflare.com, nena.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`harlan.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (nena.ns.cloudflare.com, nena.ns.cloudflare.com, nena.ns.cloudflare.com...)

Analysis

IP Addresses

spywarecops.com maps to four IP numbers: 2606:4700:3031::6815:29c6, 2606:4700:3032::ac43:c048, 104.21.41.198 and 172.67.192.72.

other host names include jiomatrimony.com, softdisque.com, www.wegotgametv.com, tarsir.com and cndehong.com.hk; they share IP numbers with spywarecops.com.

Name Servers

Two name servers harlan.ns.cloudflare.com and nena.ns.cloudflare.com handle the delegation for spywarecops.com.

spywarecops.com shares the same name server setup as other domains, for instance onlinestreamhd.com, fteinco.com, glseries.com, sky-lens.com and pa-nc.com.

spywarecops.com at least partially shares name servers with other domains, for instance biquge444.com, vegasslot265.com, zx888918.com, trademarkwastesolutions.com and modetwo.net.

These name servers are commonly used with jule.ns.cloudflare.com and venkat.ns.cloudflare.com.

Six IP addresses per host:

harlan.ns.cloudflare.com points to 2606:4700:58::a29f:2cfa, 2803:f800:50::6ca2:c3fa, 2a06:98c1:50::ac40:23fa, 108.162.195.250, 162.159.44.250 and 172.64.35.250; nena.ns.cloudflare.com points to 2606:4700:50::a29f:26a1, 2803:f800:50::6ca2:c2a1, 2a06:98c1:50::ac40:22a1, 108.162.194.161, 162.159.38.161 and 172.64.34.161

spywarecops.com - robtex.com

spywarecops.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`spywarecops.com`

`com`