malwarebytes.ir - dns.ninja

`malwarebytes.ir`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:b8ed^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:1320^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.19.32^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.237^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bart.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b47^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c147^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bart.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2147^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bart.ns.cloudflare.com`
		A	108.162.193.71^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	172.64.33.71^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
		A	173.245.59.71^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bart.ns.cloudflare.com`
NS	`sue.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a91^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sue.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c091^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sue.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2091^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sue.ns.cloudflare.com`
		A	108.162.192.145^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sue.ns.cloudflare.com`
		A	172.64.32.145^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sue.ns.cloudflare.com`
		A	173.245.58.145^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sue.ns.cloudflare.com`
MX	`mail.malwarebytes.ir` ⭐
		A	2606:4700:3034::ac43:b8ed^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	2606:4700:3035::6815:1320^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	104.21.19.32^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.67.184.237^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
TXT	`v=spf1 a:mailgw-m.getway.biz mx a:mailgw.getway.biz a:mailgw2.getway.biz ip4:...`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.19.32, 172.67.184.237
		IPv6 hints	2606:4700:3034::ac43:b8ed, 2606:4700:3035::6815:1320
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=74, name=cloudflare-ech.com
SOA	`bart.ns.cloudflare.com`dns@cloudflare.com serial=2405658500

`ir`

	DNSSEC	⚠️ Not signed
	NS	`a.nic.ir` ⭐
	NS	`b.nic.ir`
	NS	`c.nic.ir`
	NS	`d.nic.ir`
	SOA	`a.nic.ir`info@nic.ir serial=2606260145

Subdomains

mail.malwarebytes.ir

Same first word

Similar names

malwearbytes.com

malwarebyets.com

mlawarebytes.com

malwaerbytes.com

malwarebtyes.org

mlawarebytes.org

DNS History

18 records (7 active, 11 former)

●NSbart.ns.cloudflare.com2026-06-15 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-15 09:05:32
● 2026-06-25 23:02:52

○NSfog.parspack.net2026-02-26 → 2026-04-29 · 4 obs

● 2026-02-26 15:09:34
● 2026-04-29 00:37:28
○ 2026-06-08 21:20:46
○ 2026-06-25 23:02:52

○NShill.parspack.net2026-02-26 → 2026-04-29 · 4 obs

● 2026-02-26 15:09:34
● 2026-04-29 00:37:28
○ 2026-06-08 21:20:46
○ 2026-06-25 23:02:52

○NSns1.parspack.co2026-02-26 → 2026-06-25 · 2 obs

○ 2026-02-26 15:09:34
○ 2026-06-25 23:02:52

○NSns1box207.parsvds.com2026-06-08 → 2026-06-08 · 4 obs

○ 2026-04-29 00:37:28
● 2026-06-08 21:20:46
○ 2026-06-15 09:05:32
○ 2026-06-25 23:02:52

○NSns2.parspack.co2026-02-26 → 2026-06-25 · 2 obs

○ 2026-02-26 15:09:34
○ 2026-06-25 23:02:52

○NSns2box207.parsvds.com2026-06-08 → 2026-06-08 · 4 obs

○ 2026-04-29 00:37:28
● 2026-06-08 21:20:46
○ 2026-06-15 09:05:32
○ 2026-06-25 23:02:52

○NSns3.parspack.co2026-02-26 → 2026-06-25 · 2 obs

○ 2026-02-26 15:09:34
○ 2026-06-25 23:02:52

○NSns4.parspack.co2026-02-26 → 2026-06-25 · 2 obs

○ 2026-02-26 15:09:34
○ 2026-06-25 23:02:52

●NSsue.ns.cloudflare.com2026-06-15 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-15 09:05:32
● 2026-06-25 23:02:52

●MXmail.malwarebytes.ir2026-02-26 → 2026-06-25 · 5 obs

● 2026-02-26 15:09:34
● 2026-04-29 00:37:28
○ 2026-06-08 21:20:46
● 2026-06-25 23:02:50
● 2026-06-25 23:02:52

●A104.21.19.322026-06-25 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-25 23:02:50
● 2026-06-25 23:02:52

●A172.67.184.2372026-06-25 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-25 23:02:50
● 2026-06-25 23:02:52

○A185.164.72.2262026-02-26 → 2026-06-25 · 2 obs

○ 2026-02-26 15:09:34
○ 2026-06-25 23:02:52

○A185.208.173.162026-04-29 → 2026-04-29 · 4 obs

○ 2026-02-26 15:09:34
● 2026-04-29 00:37:28
○ 2026-06-08 21:20:46
○ 2026-06-25 23:02:52

○A185.208.173.32026-02-26 → 2026-02-26 · 3 obs

● 2026-02-26 15:09:34
○ 2026-04-29 00:37:28
○ 2026-06-25 23:02:52

●A2606:4700:3034::ac43:b8ed2026-06-25 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-25 23:02:50
● 2026-06-25 23:02:52

●A2606:4700:3035::6815:13202026-06-25 → 2026-06-25 · 3 obs

○ 2026-06-08 21:20:46
● 2026-06-25 23:02:50
● 2026-06-25 23:02:52

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ir	a.nic.ir, b.nic.ir, c.nic.ir, d.nic.ir	8 records
malwarebytes.ir	bart.ns.cloudflare.com, sue.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.71

NS records: bart.ns.cloudflare.com, sue.ns.cloudflare.com

🔒 DNSSEC Status

❌ Bogus (DNSSEC validation failed)

Validation error at ir: Error: DNS query timeout: 193.189.123.2 for DNSKEY ir

⏱️ Timing

Total: 3451ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.19.32, 172.67.184.237`
AAAA	2	`2606:4700:3034::ac43:b8ed, 2606:4700:3035::6815:1320`
NS	2	`bart.ns.cloudflare.com, sue.ns.cloudflare.com`
MX	1	`mail.malwarebytes.ir (pri: 10)`
TXT	1	`v=spf1 a:mailgw-m.getway.biz mx a:mailgw`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bart.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a.nic.ir, b.nic.ir, c.nic.ir...)

Analysis

Hierarchy

mail.malwarebytes.ir is delegated beneath malwarebytes.ir.

IP Addresses

malwarebytes.ir points to the four IP addresses 104.21.19.32, 172.67.184.237, 2606:4700:3034::ac43:b8ed and 2606:4700:3035::6815:1320.

Among the host names that share IP numbers with malwarebytes.ir are cedarcityhospitalfoundation.net, livecam007.com, purplebike.de and two others.

Name Servers

malwarebytes.ir is served by two delegated name servers, bart.ns.cloudflare.com and sue.ns.cloudflare.com.

malwarebytes.ir has the same name server delegation as a number of other domains, such as innercompassmasterclass.com, licenco.com, ride-app.net and two more.

There is at least partial name server overlap between malwarebytes.ir and other domains — prostocopy.ru, fxsignals.com, bridgematrix.pics and two more among them.

The name servers nile.ns.cloudflare.com, hera.ns.cloudflare.com and maria.ns.cloudflare.com are often found in combination with these name servers.

Host names resolving to 6 IP numbers:

bart.ns.cloudflare.com carries IP addresses 108.162.193.71, 172.64.33.71 and 173.245.59.71, with 3 other addresses beyond those.

sue.ns.cloudflare.com carries IP addresses 108.162.192.145, 172.64.32.145 and 173.245.58.145, with 3 other addresses beyond those.

Mail Servers

malwarebytes.ir routes its mail through a single mail server, mail.malwarebytes.ir.

The host mail.malwarebytes.ir directs to four IP numbers: 104.21.19.32, 172.67.184.237, 2606:4700:3034::ac43:b8ed and 2606:4700:3035::6815:1320.