`nefariouslabs.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:14c9^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:c261^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.20.201^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.194.97^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`mary.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a86^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mary.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c086^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`mary.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2086^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`mary.ns.cloudflare.com`
		A	108.162.192.134^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mary.ns.cloudflare.com`
		A	172.64.32.134^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mary.ns.cloudflare.com`
		A	173.245.58.134^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`mary.ns.cloudflare.com`
NS	`toby.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bef^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`toby.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ef^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`toby.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ef^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`toby.ns.cloudflare.com`
		A	108.162.193.239^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`toby.ns.cloudflare.com`
		A	172.64.33.239^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`toby.ns.cloudflare.com`
		A	173.245.59.239^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`toby.ns.cloudflare.com`
MX	`monday-relay.mxrouting.net` ⭐
		A	45.43.208.27^{🇺🇸 QUICKPACKET45.43.208.0/24 QuickPacket LLC}
			PTR	`monday.mxrouting.net`
MX	`monday.mxrouting.net`⁽²⁰⁾
		A	45.43.208.27^{🇺🇸 QUICKPACKET45.43.208.0/24 QuickPacket LLC}
			PTR	`monday.mxrouting.net`
TXT	`google-site-verification=gkUYFahkRq4e9OsrKehwkkcwOAYdnxWlj6-IwpGgEiM`
TXT	`v=spf1 a mx ip4:45.58.122.34 ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.20.201, 172.67.194.97
		IPv6	2606:4700:3034::6815:14c9, 2606:4700:3037::ac43:c261
SOA	`mary.ns.cloudflare.com`dns@cloudflare.com serial=2398307862

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

Same first word

nefariouslabs.com

DNS History

18 records (8 active, 10 former)

●NSmary.ns.cloudflare.com2026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

○NSns15.domaincontrol.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

○NSns16.domaincontrol.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

●NStoby.ns.cloudflare.com2026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

○MXalt1.aspmx.l.google.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

○MXalt2.aspmx.l.google.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

○MXaspmx.l.google.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

○MXaspmx2.googlemail.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

○MXaspmx3.googlemail.com2015-07-24 → 2020-02-21 · 4 obs

● 2015-07-24 11:33:14
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

●MXmonday-relay.mxrouting.net2026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

●MXmonday.mxrouting.net2026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

○A104.199.116.1472017-03-20 → 2017-03-20 · 4 obs

○ 2016-07-14 23:37:06
● 2017-03-20 10:12:54
○ 2020-02-21 23:19:52
○ 2026-03-24 07:37:52

○A104.199.119.172020-02-21 → 2020-02-21 · 4 obs

○ 2017-03-20 10:12:54
● 2020-02-21 23:19:52
○ 2026-03-04 13:16:52
○ 2026-03-24 07:37:52

●A104.21.20.2012026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

●A172.67.194.972026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

○A23.92.18.2002015-07-24 → 2016-07-14 · 4 obs

● 2015-07-24 11:33:14
● 2016-07-14 23:37:06
○ 2017-03-20 10:12:54
○ 2026-03-24 07:37:52

●A2606:4700:3034::6815:14c92026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

●A2606:4700:3037::ac43:c2612026-03-04 → 2026-03-24 · 3 obs

○ 2020-02-21 23:19:52
● 2026-03-04 13:16:52
● 2026-03-24 07:37:52

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
nefariouslabs.com	mary.ns.cloudflare.com, toby.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.239

NS records: mary.ns.cloudflare.com, toby.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for nefariouslabs.com (unsigned zone)

⏱️ Timing

Total: 145ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.20.201, 172.67.194.97`
AAAA	2	`2606:4700:3037::ac43:c261, 2606:4700:3034::6815:14c9`
NS	2	`mary.ns.cloudflare.com, toby.ns.cloudflare.com`
MX	2	`monday.mxrouting.net (pri: 10), monday-relay.mxrouting.net (pri: 20)`
TXT	2	`google-site-verification=gkUYFahkRq4e9Os, v=spf1 a mx ip4:45.58.122.34 ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`mary.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (mary.ns.cloudflare.com, mary.ns.cloudflare.com, mary.ns.cloudflare.com...)

Analysis

IP Addresses

Four IP numbers are pointed to by nefariouslabs.com: 2606:4700:3034::6815:14c9, 2606:4700:3037::ac43:c261, 104.21.20.201 and 172.67.194.97.

other host names including epajumo.top, www.hd(0x706f726e)free.tv, simeon.ws, lipnews1.com and trendymodernoptical.com share IP numbers with nefariouslabs.com.

Name Servers

nefariouslabs.com is delegated to two name servers mary.ns.cloudflare.com and toby.ns.cloudflare.com.

nefariouslabs.com shares the same name server setup as other domains, for instance bansoft.com, segurancadotrabalhonwn.com, everlastting.com, thevack.ru and software-clinic.pl.

nefariouslabs.com at least partially shares name servers with other domains, for instance helen-volga.com, bons2reduction.com, fisitihaoncollective.digital, vanmeer.com and munabe.es.

these name servers are commonly used alongside ollie.ns.cloudflare.com.

Host names with six IP numbers:

Host name mary.ns.cloudflare.com points to: 2606:4700:50::adf5:3a86, 2803:f800:50::6ca2:c086, 2a06:98c1:50::ac40:2086, 108.162.192.134, 172.64.32.134 and 173.245.58.134.

Host name toby.ns.cloudflare.com points to: 2606:4700:58::adf5:3bef, 2803:f800:50::6ca2:c1ef, 2a06:98c1:50::ac40:21ef, 108.162.193.239, 172.64.33.239 and 173.245.59.239.

Mail Servers

Two mail servers handle nefariouslabs.com: monday-relay.mxrouting.net and monday.mxrouting.net.

nefariouslabs.com shares the same mail server setup as other domains, for instance paulovic.com, greenwoodny.gov, icandoathing.com, wehas(0x706f726e).com and dallastxgaragedoor.com.

nefariouslabs.com shares some mail servers with other domains, at least partially, for instance kinda-awesome.com, pimpin101.net, 2nedev.co.uk, wopr.net and rassin.net.

Host names with a single IP:

monday-relay.mxrouting.net points to 45.43.208.27.

monday.mxrouting.net points to 45.43.208.27.

Host names pointing to 45.43.208.27: monday-relay.mxrouting.net and monday.mxrouting.net.

nefariouslabs.com - robtex.com