Skip to content

Hostname

ngsw.ws

Last fetched

ngsw.ws resolves to 20.255.126.187, announced in 20.192.0.0/10 by MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation in HK. ngsw.ws is listed by 1 threat feed; reconciled level HIGH.

Threat posture

40threat score (procedure-native scale)

HIGH

Listed by 1 threat feed. At least one source recommends blocking.

Threat feeds listing this
1
Verdict coverage
malicious-evidenced
First seen on a feed
Tue, 08 Sep 2026 10:02:42 GMT
Last seen on a feed
Mon, 14 Sep 2026 23:25:39 GMT

Nutrition Label

WHISPER CANON · ngsw.wsRouting diversity1.5/10Peering density8.0/10MOAS conflict✓ noneThreat-feed listings8.0/10WHOIS transparency0.0/10Resolver footprint3.2/10canon.whisper.security/host/ngsw.ws

Resolution chain

IPv6 resolution

No AAAA record for ngsw.ws is recorded in WhisperGraph.

WHOIS identity

WhisperGraph holds no WHOIS registrar, registrant organisation or contact email for ngsw.ws. WHOIS is recorded against the registrable domain, so a subdomain such as a www. host carries none of its own — check the registrable domain for this name.

Mail and authentication

Nameservers

  • doug.ns.cloudflare.com
  • ullis.ns.cloudflare.com

Threat-feed evidence

History

Related pages

Pivot from ngsw.ws into the addresses, networks and registries it depends on.

Cypher and MCP

Reproduce this hostname's resolution chain against graph.whisper.security:

MATCH (h:HOSTNAME {name: "ngsw.ws"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)-[:ROUTES]->(a:ASN)
OPTIONAL MATCH (a)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, a.name AS asn, n.name AS network
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.