shadowserver.io - robtex.com

shadowserver.io

DNSSEC⚠️ Not signed
NSns1.shadowserver.org
A64.71.138.162🇺🇸 HURRICANE64.71.128.0/18 Hurricane Electric 55 South Market St San Jose, CA
NSns2.shadowserver.org
A91.213.203.35🇳🇴 UNDERWORLD-AS91.213.203.0/24 AS-UWORLD-NO
NSns3.shadowserver.org
A154.9.2.53🇺🇸 SHADOWSERVER-FOUNDATION-22168154.9.2.0/23
PTRns3.shadowserver.org
MXmail.shadowserver.org
A154.9.2.12🇺🇸 SHADOWSERVER-FOUNDATION-22168154.9.2.0/23
PTRmail.shadowserver.org
MXmx2.shadowserver.org(20)
A216.218.229.8🇺🇸 HURRICANE216.218.128.0/17 Hurricane Electric 55 South Market St San Jose, CA
SOAns1.shadowserver.orgroot@shadowserver.io 2026-06-17 #5

io

DNSSEC🔒 Signed (DS record present)
NSa0.nic.io
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1786017709
📈 Tranco rank: #24,202

Subdomains

Same first word

Similar names

DNS History

5 records (5 active, 0 former)

NSns1.shadowserver.orgns2.shadowserver.orgns3.shadowserver.orgMXmail.shadowserver.orgmx2.shadowserver.org
NSns1.shadowserver.org2026-06-19 → 2026-08-06 · 2 obs
● 2026-06-19 19:54:30
● 2026-08-06 12:16:18
NSns2.shadowserver.org2026-06-19 → 2026-08-06 · 2 obs
● 2026-06-19 19:54:30
● 2026-08-06 12:16:18
NSns3.shadowserver.org2026-06-19 → 2026-08-06 · 2 obs
● 2026-06-19 19:54:30
● 2026-08-06 12:16:18
MXmail.shadowserver.org2026-06-19 → 2026-08-06 · 2 obs
● 2026-06-19 19:54:30
● 2026-08-06 12:16:18
MXmx2.shadowserver.org2026-06-19 → 2026-08-06 · 2 obs
● 2026-06-19 19:54:30
● 2026-08-06 12:16:18

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
ioc0.nic.io, a2.nic.io, a0.nic.io, b0.nic.io-
shadowserver.ions2.shadowserver.org, ns3.shadowserver.org, ns1.shadowserver.org-

✅ Authoritative Response

Server:64.71.138.162

NS records: ns2.shadowserver.org, ns3.shadowserver.org, ns1.shadowserver.org

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shadowserver.io (unsigned zone)

⏱️ Timing

Total: 744ms | Queries: -

📄 Records

TypeCountSample Data
NS3ns3.shadowserver.org, ns2.shadowserver.org...
MX2mail.shadowserver.org (pri: 10), mx2.shadowserver.org (pri: 20)
SOA1ns1.shadowserver.org root.shadowserver.i

Analysis

Hierarchy

The host names scan-75-00.shadowserver.io, scan-14.shadowserver.io, scan-90-0.shadowserver.io, scan-73-00.shadowserver.io and scan-66-0.shadowserver.io — among a few others — fall under the parent domain shadowserver.io.

Name Servers

shadowserver.io has three name servers — ns1.shadowserver.org, ns2.shadowserver.org and ns3.shadowserver.org.

At least some of shadowserver.io's name servers are shared with other domains, for example shadowshield.us, shadowserver.eu, 232-29.200.62.64.in-addr.arpa and two more.

These name servers tend to co-occur with ns4.shadowserver.org, ns1.shadowshield.us, ns2.shadowshield.us and 3 other name servers in the same DNS delegations.

Each of the three hostnames points to exactly one IP address: ns1.shadowserver.org points to 64.71.138.162, ns2.shadowserver.org points to 91.213.203.35 and ns3.shadowserver.org points to 154.9.2.53.

Mail Servers

shadowserver.io uses two mail servers, mail.shadowserver.org and mx2.shadowserver.org.

The mail server setup of shadowserver.io is identical to that of domains like shadowserver.org, mail.shadowserver.org and shadowserver.eu.

shadowserver.io overlaps on mail servers with several other domains, for example shadowserver-sinkhole.com, sinkhole-registry.net, sinkhole-registry.com and rolr.eu.

These mail servers tend to be used in conjunction with the mail servers mail.rolr.eu.

Each of mail.shadowserver.org and mx2.shadowserver.org has one IP address: mail.shadowserver.org uses 154.9.2.12 and mx2.shadowserver.org uses 216.218.229.8.