malware.builders - dns.ninja

`malware.builders`

DNSSEC	⚠️ Not signed
A	3.33.130.190^{🇺🇸 Amazon3.33.128.0/20}
		PTR	`a2aa9ff50de748dbe.awsglobalaccelerator.com`
A	15.197.148.33^{🇺🇸 Amazon15.197.144.0/20}
NS	`ns45.domaincontrol.com` ⭐
		A	2603:5:2162::17^{🇺🇸 GODADDY-DNS2603:5:2160::/44}
			PTR	`ns45.domaincontrol.com`
		A	97.74.102.23^{🇺🇸 GODADDY-DNS97.74.102.0/23}
			PTR	`ns45.domaincontrol.com`
NS	`ns46.domaincontrol.com`
		A	2603:5:2262::17^{🇺🇸 GODADDY-DNS2603:5:2260::/44}
			PTR	`ns46.domaincontrol.com`
		A	173.201.70.23^{🇺🇸 GODADDY-DNS173.201.70.0/23}
			PTR	`ns46.domaincontrol.com`
MX	`smtp.secureserver.net` ⭐
		A	216.69.141.71^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp01-v01.prod.phx3.secureserver.net`
		A	216.69.141.84^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp02-v01.prod.phx3.secureserver.net`
		A	216.69.141.113^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp03-v01.prod.phx3.secureserver.net`
MX	`mailstore1.secureserver.net`⁽¹⁰⁾
		A	216.69.141.78^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp01-v02.prod.phx3.secureserver.net`
		A	216.69.141.114^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp03-v02.prod.phx3.secureserver.net`
		A	216.69.141.162^{🇺🇸 AS398101216.69.140.0/22}
			PTR	`osplibsmtp02-v02.prod.phx3.secureserver.net`
SOA	`ns45.domaincontrol.com`dns@jomax.net 2023-09-19 #0

`builders`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.builders` ⭐
	NS	`v0n1.nic.builders`
	NS	`v0n2.nic.builders`
	NS	`v0n3.nic.builders`
	NS	`v2n0.nic.builders`
	NS	`v2n1.nic.builders`
	SOA	`v0n0.nic.builders`hostmaster@donuts.email serial=1786077311

⚠️ On DNS blocklist: spam-tlds

Same first word

malware.exposed

malware.hosting

malware.com

malware.business

malware.services

malware.eu

malware.guide

malware.net

malware.pl

malware.fox

malware.be

malware.(0x706f726e)

malware.exchange

malware.today

malware.cn

malware.cc

malware.biz

malware.center

malware.se

malware.farm

malware.sx

malware.wtf

malware.cl

malware.directory

malware.su

malware.expert

malware.builders

malware.win

malware.mobi

malware.onl

malware.com.br

malware.zip

malware.ai

malware.xyz

malware.email

malware.ru

malware.guru

malware.tv

malware.fr

malware.ro

malware.nu

malware.lu

malware.org

malware.re

malware.me

malware.boutique

malware.watch

malware.no

malware.cz

malware.careers

malware.report

malware.es

malware.at

Similar names

elmarwa.com

malwear.com

amrelaw.com

rawmale.com

lawream.com

mawlare.net

wealarm.com

malwear.co

malwear.org

realawm.com

amerlaw.com

reamlaw.net

reamlaw.com

meralaw.com

walmare.com

marwael.fr

malwear.wtf

amlware.com

DNS History

7 records (6 active, 1 former)

●NSns45.domaincontrol.com2016-12-10 → 2026-08-07 · 2 obs

● 2016-12-10 18:42:34
● 2026-08-07 05:14:48

●NSns46.domaincontrol.com2016-12-10 → 2026-08-07 · 2 obs

● 2016-12-10 18:42:34
● 2026-08-07 05:14:48

●MXmailstore1.secureserver.net2016-12-10 → 2026-08-07 · 2 obs

● 2016-12-10 18:42:34
● 2026-08-07 05:14:48

●MXsmtp.secureserver.net2016-12-10 → 2026-08-07 · 2 obs

● 2016-12-10 18:42:34
● 2026-08-07 05:14:48

●A15.197.148.332026-03-22 → 2026-08-07 · 3 obs

○ 2017-09-02 01:50:32
● 2026-03-22 06:17:54
● 2026-08-07 05:14:48

○A184.168.221.482016-12-10 → 2017-09-02 · 4 obs

● 2016-12-10 18:42:34
● 2017-09-02 01:50:32
○ 2026-03-22 06:17:54
○ 2026-08-07 05:14:48

●A3.33.130.1902026-03-22 → 2026-08-07 · 3 obs

○ 2017-09-02 01:50:32
● 2026-03-22 06:17:54
● 2026-08-07 05:14:48

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
builders	v0n0.nic.builders, v0n1.nic.builders, v0n2.nic.builders, v0n3.nic.builders...	12 records
malware.builders	ns46.domaincontrol.com, ns45.domaincontrol.com	-

✅ Authoritative Response

Server:97.74.102.23

NS records: ns46.domaincontrol.com, ns45.domaincontrol.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malware.builders (unsigned zone)

⏱️ Timing

Total: 375ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`3.33.130.190, 15.197.148.33`
NS	2	`ns45.domaincontrol.com, ns46.domaincontrol.com`
MX	2	`mailstore1.secureserver.net (pri: 10), smtp.secureserver.net (pri: 0)`
SOA	1	`ns45.domaincontrol.com dns.jomax.net`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.builders, v0n1.nic.builders, v0n2.nic.builders...)

Analysis

IP Addresses

malware.builders resolves to the IP addresses 3.33.130.190 and 15.197.148.33

snappowerx.com, pncn.me, bbc-llc.com and two other host names share IP numbers with malware.builders.

Name Servers

malware.builders is delegated to two name servers: ns45.domaincontrol.com and ns46.domaincontrol.com.

malware.builders uses the same name servers as several other domains — among them imagine-books.com, cartes-na.com, myttax.com and two more.

ns45.domaincontrol.com and ns46.domaincontrol.com each resolve to two IP addresses: ns45.domaincontrol.com points to 97.74.102.23 and 2603:5:2162::17, while ns46.domaincontrol.com points to 173.201.70.23 and 2603:5:2262::17.

Mail Servers

Mail for malware.builders is handled by two mail servers — mailstore1.secureserver.net and smtp.secureserver.net.

malware.builders uses an identical mail server configuration to several other domains — among them artlist.info, top10smbloans.com, new-oem-parts.com and two more.

mailstore1.secureserver.net and smtp.secureserver.net each have three IP addresses — mailstore1.secureserver.net directs to 216.69.141.78, 216.69.141.114 and 216.69.141.162; smtp.secureserver.net directs to 216.69.141.71, 216.69.141.84 and 216.69.141.113.