Hostname
ppv.cx
Last fetched
ppv.cx resolves to 104.21.79.185, announced in 104.21.64.0/20 by CLOUDFLARENET - Cloudflare, Inc. in CA. ppv.cx is listed by 3 threat feeds; reconciled level HIGH.
Threat posture
40threat score (procedure-native scale)
HIGHListed by 3 threat feeds. At least one source recommends blocking.
Categories: Phishing
- Threat feeds listing this
- 3
- Verdict coverage
- malicious-evidenced
- First seen on a feed
- Wed, 26 Aug 2026 14:45:24 GMT
- Last seen on a feed
- Tue, 15 Sep 2026 00:18:35 GMT
Nutrition Label
Resolution chain
- 104.21.79.185
104.21.64.0/20 · CLOUDFLARENET - Cloudflare, Inc. · Toronto, CA
- 172.67.147.11
172.67.144.0/20 · CLOUDFLARENET - Cloudflare, Inc. · Toronto, CA
- 188.114.96.3
188.114.96.0/24 · CLOUDFLARENET - Cloudflare, Inc. · Toronto, CA
- 188.114.97.3
188.114.97.0/24 · CLOUDFLARENET - Cloudflare, Inc. · Toronto, CA
- 81.17.16.196
81.17.16.0/20 · PLI-AS - Private Layer INC · Bern, CH
IPv6 resolution
Attribution
Cloudflare
cdn · ORIGIN_AS, CDN
WHOIS identity
- Registrar
- registrar:centralnic ltd
Subdomains
| Subdomain |
|---|
| api.ppv.cx |
Showing 1 of 2. View all subdomains →
Mail and authentication
Nameservers
- boyd.ns.cloudflare.com
- heidi.ns.cloudflare.com
- olga.ns.cloudflare.com
- west.ns.cloudflare.com
- ns.anycast.nic.cx
- ns1.anycastdns.cz
- ns2.anycastdns.cz
- 1-ceci.njalla.do
- 3-pas.njalla.in
- 2-nest.pipe.ma
- a.root-servers.net
- b.root-servers.net
- c.root-servers.net
- d.root-servers.net
- e.root-servers.net
- f.root-servers.net
- g.root-servers.net
- h.root-servers.net
- i.root-servers.net
- j.root-servers.net
- k.root-servers.net
- l.root-servers.net
- m.root-servers.net
Threat-feed evidence
History
Related pages
Pivot from ppv.cx into the addresses, networks and registries it depends on.
Cypher and MCP
Reproduce this hostname's resolution chain against graph.whisper.security:
MATCH (h:HOSTNAME {name: "ppv.cx"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)-[:ROUTES]->(a:ASN)
OPTIONAL MATCH (a)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, a.name AS asn, n.name AS network
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.