`malwarelibrary.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:885c^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:50fd^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.80.253^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.136.92^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`kobe.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cc1^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kobe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3c1^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kobe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23c1^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kobe.ns.cloudflare.com`
		A	108.162.195.193^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kobe.ns.cloudflare.com`
		A	162.159.44.193^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kobe.ns.cloudflare.com`
		A	172.64.35.193^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kobe.ns.cloudflare.com`
NS	`sierra.ns.cloudflare.com`
		A	2606:4700:50::a29f:26f5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2f5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sierra.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22f5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sierra.ns.cloudflare.com`
		A	108.162.194.245^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	162.159.38.245^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
		A	172.64.34.245^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sierra.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.80.253, 172.67.136.92
		IPv6	2606:4700:3034::ac43:885c, 2606:4700:3037::6815:50fd
SOA	`kobe.ns.cloudflare.com`dns@cloudflare.com serial=2397826170

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

Same first word

malwarelibrary.com

DNS History

16 records (11 active, 5 former)

●NSkobe.ns.cloudflare.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

○NSns43.domaincontrol.com2015-07-31 → 2015-07-31 · 3 obs

● 2015-07-31 20:33:02
○ 2015-11-19 04:37:34
○ 2026-03-02 10:02:56

○NSns44.domaincontrol.com2015-07-31 → 2015-07-31 · 3 obs

● 2015-07-31 20:33:02
○ 2015-11-19 04:37:34
○ 2026-03-02 10:02:56

●NSsierra.ns.cloudflare.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●MXeforward1.registrar-servers.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●MXeforward2.registrar-servers.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●MXeforward3.registrar-servers.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●MXeforward4.registrar-servers.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●MXeforward5.registrar-servers.com2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

○MXmailstore1.secureserver.net2015-07-31 → 2015-07-31 · 3 obs

● 2015-07-31 20:33:02
○ 2015-11-19 04:37:34
○ 2026-03-02 10:02:56

○MXsmtp.secureserver.net2015-07-31 → 2015-07-31 · 3 obs

● 2015-07-31 20:33:02
○ 2015-11-19 04:37:34
○ 2026-03-02 10:02:56

●A104.21.80.2532026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●A172.67.136.922026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

○A184.168.221.542015-07-31 → 2015-07-31 · 3 obs

● 2015-07-31 20:33:02
○ 2015-11-19 04:37:34
○ 2026-03-02 10:02:56

●A2606:4700:3034::ac43:885c2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

●A2606:4700:3037::6815:50fd2026-02-17 → 2026-03-02 · 3 obs

○ 2015-11-19 04:37:34
● 2026-02-17 09:42:44
● 2026-03-02 10:02:56

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	c.gtld-servers.net, d.gtld-servers.net, h.gtld-servers.net, l.gtld-servers.net...	-
malwarelibrary.com	kobe.ns.cloudflare.com, sierra.ns.cloudflare.com	12 records

✅ Authoritative Response

Server: 108.162.194.245

NS records: kobe.ns.cloudflare.com, sierra.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for malwarelibrary.com (unsigned zone)

⏱️ Timing

Total: 160ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.80.253, 172.67.136.92`
AAAA	2	`2606:4700:3034::ac43:885c, 2606:4700:3037::6815:50fd`
NS	2	`kobe.ns.cloudflare.com, sierra.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`kobe.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (kobe.ns.cloudflare.com, kobe.ns.cloudflare.com, kobe.ns.cloudflare.com...)

Analysis

IP Addresses

malwarelibrary.com resolves to four IPs: 2606:4700:3034::ac43:885c, 2606:4700:3037::6815:50fd, 104.21.80.253 and 172.67.136.92.

Other host names, for instance kfzwaermespeicher.com, bobangles.com.au, jasabuat.web.id, kalto-97mexurn.click and oracleepm.guide share IP numbers with malwarelibrary.com.

Name Servers

malwarelibrary.com has two name servers: kobe.ns.cloudflare.com and sierra.ns.cloudflare.com.

malwarelibrary.com shares the same name server setup as other domains, for example chxun.com, multicarelegacy.org, traningspuls.se, yamidi.com and uscasinofinder.com.

malwarelibrary.com shares some name servers with other domains, for example sidat.digital, schwabeindia.net, jasnowidz.net, quartzweald.ru and vspro.fi.

These name servers are often used together with finley.ns.cloudflare.com, gwen.ns.cloudflare.com and paityn.ns.cloudflare.com.

Host names with six IP numbers: kobe.ns.cloudflare.com points to: 2606:4700:58::a29f:2cc1, 2803:f800:50::6ca2:c3c1, 2a06:98c1:50::ac40:23c1, 108.162.195.193, 162.159.44.193 and 172.64.35.193; sierra.ns.cloudflare.com points to: 2606:4700:50::a29f:26f5, 2803:f800:50::6ca2:c2f5, 2a06:98c1:50::ac40:22f5, 108.162.194.245, 162.159.38.245 and 172.64.34.245.

Mail Servers

malwarelibrary.com is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com.

malwarelibrary.com shares some mail servers with other domains, at least partially; for instance mccullararchitects.com, waddle.cloud, badideabox.com, improv.monster and worldlinkuk.org.

these mail servers are commonly used alongside eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names with a single IP:

Host eforward1.registrar-servers.com points to 162.255.118.51.

Host eforward2.registrar-servers.com points to 162.255.118.52.

Host eforward3.registrar-servers.com points to 162.255.118.51.

Host eforward4.registrar-servers.com points to 162.255.118.52.

Host eforward5.registrar-servers.com points to 162.255.118.51.

Host names pointing to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

Host names pointing to 162.255.118.52: eforward2.registrar-servers.com and eforward4.registrar-servers.com.

malwarelibrary.com - robtex.com