malwarebot.com - dns.ninja
malwarebot.com
| DNSSEC | β οΈ Not signed | ||||||
| A | 3.33.139.32πΊπΈ Amazon3.33.128.0/20 | ||||||
| NS | ns1.markmonitor.com β | ||||||
| A | 2620:10a:80a8::1π¨π¦ CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada | ||||||
| A | 149.112.160.1π¨π¦ CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada | ||||||
| NS | ns2.markmonitor.com | ||||||
| A | 2001:67c:10b8::1π¨π RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net | ||||||
| PTR | ns2.markmonitor.com | ||||||
| A | 176.97.158.1π¦πΉ RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net | ||||||
| NS | ns3.markmonitor.com | ||||||
| A | 2620:10a:80a9::1π¨π¦ CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada | ||||||
| A | 149.112.161.1π¨π¦ CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada | ||||||
| NS | ns4.markmonitor.com | ||||||
| A | 2001:67c:1bc::1π¦πΉ RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast | ||||||
| PTR | ns1.markmonitor.com | ||||||
| A | 192.174.68.1π¦πΉ RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net | ||||||
| SOA | ns1.markmonitor.comhostmaster@markmonitor.com 2022-10-11 #3 | ||||||
com
| DNSSEC | π Signed (DS record present) | ||||||
| NS | a.gtld-servers.net β | ||||||
| NS | b.gtld-servers.net | ||||||
| NS | c.gtld-servers.net | ||||||
| NS | d.gtld-servers.net | ||||||
| NS | e.gtld-servers.net | ||||||
| NS | f.gtld-servers.net | ||||||
| NS | g.gtld-servers.net | ||||||
| NS | h.gtld-servers.net | ||||||
| NS | i.gtld-servers.net | ||||||
| NS | j.gtld-servers.net | ||||||
| NS | k.gtld-servers.net | ||||||
| NS | l.gtld-servers.net | ||||||
| NS | m.gtld-servers.net | ||||||
| SOA | a.gtld-servers.netnstld@verisign-grs.com serial=1782656325 | ||||||
Subdomains
Same first word
malwarebot.com |
Similar names
DNS History
5 records (5 active, 0 former)
βNSns1.markmonitor.com2026-02-18 β 2026-06-28 Β· 2 obs
β 2026-06-28 14:40:34
βNSns2.markmonitor.com2026-02-18 β 2026-06-28 Β· 2 obs
β 2026-06-28 14:40:34
βNSns3.markmonitor.com2026-02-18 β 2026-06-28 Β· 2 obs
β 2026-06-28 14:40:34
βNSns4.markmonitor.com2026-02-18 β 2026-06-28 Β· 2 obs
β 2026-06-28 14:40:34
βA3.33.139.322026-02-18 β 2026-06-28 Β· 2 obs
β 2026-06-28 14:40:34
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| com | i.gtld-servers.net, c.gtld-servers.net, m.gtld-servers.net, d.gtld-servers.net... | - |
| malwarebot.com | ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns2.markmonitor.com | 8 records |
β Authoritative Response
Server:192.174.68.1
NS records: ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns2.markmonitor.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
No DS record for malwarebot.com (unsigned zone)
β±οΈ Timing
Total: 282ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 1 | 3.33.139.32 |
| NS | 4 | ns1.markmonitor.com, ns2.markmonitor.com... |
| SOA | 1 | ns1.markmonitor.com hostmaster.markmonit |
π Glue Records Collected
Total: 8
Out-of-bailiwick: 8 (ns1.markmonitor.com, ns1.markmonitor.com, ns3.markmonitor.com...)
Analysis
Hierarchy
download.malwarebot.com, www.malwarebot.com and support.malwarebot.com each fall under the parent domain malwarebot.com.
IP Addresses
malwarebot.com resolves to one IP address: 3.33.139.32.
orgmail.warningsigns.org, amazontagstore.com, tommyhilfigerdubai.com and two other host names share IP numbers with malwarebot.com.
Name Servers
The authoritative name servers for malwarebot.com are ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com and ns4.markmonitor.com.
malwarebot.com partially shares its NS delegation with several other domains, including paysafe.lu, hellofax.co, uobpoy.com and two others.
These name servers regularly co-occur with the name servers ns5.markmonitor.com, ns6.markmonitor.com and ns7.markmonitor.com.
ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com and ns4.markmonitor.com each carry two IP addresses. ns1.markmonitor.com has 149.112.160.1 and 2620:10a:80a8::1; ns2.markmonitor.com has 176.97.158.1 and 2001:67c:10b8::1; ns3.markmonitor.com has 149.112.161.1 and 2620:10a:80a9::1; ns4.markmonitor.com has 192.174.68.1 and 2001:67c:1bc::1.