`malwareprograms.com`

DNSSEC	⚠️ Not signed
A	208.91.197.195^{🇻🇬 CONFLUENCE-NETWORK-INC208.91.197.0/24 Confluence Networks Route Object}
NS	`ns2.buydomains.com` ⭐ ⚠️ Not in zone NS records
NS	`ns.buydomains.com` ⚠️ Not in zone NS records
		A	52.20.26.87^{🇺🇸 Amazon52.20.0.0/14 EC2 IAD prefix}
			PTR	`ec2-52-20-26-87.compute-1.amazonaws.com`
SOA	`ns.buydomains.com`bd-operations@namemedia.com 2025-11-26 #22

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

Same first word

malwareprograms.com

DNS History

11 records (3 active, 8 former)

○NSbuy.internettraffic.com2015-07-19 → 2016-04-30 · 4 obs

● 2015-07-19 14:00:58
● 2016-04-30 10:03:28
○ 2017-01-28 20:43:20
○ 2026-03-22 12:54:40

●NSns.buydomains.com2026-03-21 → 2026-03-22 · 3 obs

○ 2018-07-04 16:43:28
● 2026-03-21 10:10:06
● 2026-03-22 12:54:40

○NSns1.parkingcrew.net2017-01-28 → 2018-07-04 · 5 obs

○ 2016-04-30 10:03:28
● 2017-01-28 20:43:20
● 2018-07-04 16:43:28
○ 2026-03-21 10:10:06
○ 2026-03-22 12:54:40

●NSns2.buydomains.com2026-03-21 → 2026-03-22 · 3 obs

○ 2018-07-04 16:43:28
● 2026-03-21 10:10:06
● 2026-03-22 12:54:40

○NSns2.parkingcrew.net2017-01-28 → 2018-07-04 · 5 obs

○ 2016-04-30 10:03:28
● 2017-01-28 20:43:20
● 2018-07-04 16:43:28
○ 2026-03-21 10:10:06
○ 2026-03-22 12:54:40

○NSsell.internettraffic.com2015-07-19 → 2016-04-30 · 4 obs

● 2015-07-19 14:00:58
● 2016-04-30 10:03:28
○ 2017-01-28 20:43:20
○ 2026-03-22 12:54:40

○MXmail.h-email.net2017-01-28 → 2018-07-04 · 4 obs

● 2017-01-28 20:43:20
● 2018-07-04 16:43:28
○ 2026-03-21 10:10:06
○ 2026-03-22 12:54:40

○A185.53.179.62017-01-28 → 2018-07-04 · 5 obs

○ 2016-04-30 10:03:28
● 2017-01-28 20:43:20
● 2018-07-04 16:43:28
○ 2026-03-21 10:10:06
○ 2026-03-22 12:54:40

●A208.91.197.1952026-03-21 → 2026-03-22 · 3 obs

○ 2018-07-04 16:43:28
● 2026-03-21 10:10:06
● 2026-03-22 12:54:40

○A69.172.201.1532016-04-30 → 2016-04-30 · 4 obs

○ 2016-02-09 14:18:34
● 2016-04-30 10:03:28
○ 2017-01-28 20:43:20
○ 2026-03-22 12:54:40

○A69.172.201.2082015-07-19 → 2016-02-09 · 4 obs

● 2015-07-19 14:00:58
● 2016-02-09 14:18:34
○ 2016-04-30 10:03:28
○ 2026-03-22 12:54:40

🔍 DNS Trace

Analysis

IP Addresses

malwareprograms.com resolves to one IP number: 208.91.197.195.

Other host names, for instance wellnesssecured.com, www.bluesshakedown.com, vq2us384-int.corio.com, p1863.superclick.com and premiumbikegear.com share IP numbers with malwareprograms.com.

Name Servers

malwareprograms.com's delegation uses two name servers: ns2.buydomains.com and ns.buydomains.com.

malwareprograms.com uses the same name server setup as other domains, such as pimt.net, ontariotattoos.com, communitysail.com, stvibes.com and empowermywellness.com.

malwareprograms.com at least partially shares name servers with other domains, including mypsf.com, beamusing.com, dakotagourmet.com, dandit.com and ukpols.com.

These name servers are commonly used with this-domain-for-sale.com.

Host names with a single IP number: The host name ns.buydomains.com points to 52.20.26.87.

malwareprograms.com - robtex.com