threatmon.io - robtex.com

threatmon.io

DNSSEC⚠️ Not signed
A160.153.0.209🇺🇸 CLOUDFLARESPECTRUM160.153.0.0/24 MWP
PTR209.0.153.160.host.secureserver.net
NSguy.ns.cloudflare.com
A2606:4700:58::adf5:3bad🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguy.ns.cloudflare.com
A2803:f800:50::6ca2:c1ad🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRguy.ns.cloudflare.com
A2a06:98c1:50::ac40:21ad🇺🇸 Cloudflare2a06:98c1:50::/45
PTRguy.ns.cloudflare.com
A108.162.193.173🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguy.ns.cloudflare.com
A172.64.33.173🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguy.ns.cloudflare.com
A173.245.59.173🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguy.ns.cloudflare.com
NStegan.ns.cloudflare.com
A2606:4700:50::adf5:3ae2🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A2803:f800:50::6ca2:c0e2🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtegan.ns.cloudflare.com
A2a06:98c1:50::ac40:20e2🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtegan.ns.cloudflare.com
A108.162.192.226🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A172.64.32.226🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
A173.245.58.226🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtegan.ns.cloudflare.com
MXaspmx.l.google.com
A2607:f8b0:4004:c07::1b🇺🇸 Google2607:f8b0:4004::/48
PTRbc-in-f27.1e100.net
A172.253.62.26🇺🇸 Google172.253.62.0/24
PTRbc-in-f26.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1b🇨🇱 Google2800:3f0:4003::/48
A108.177.123.27🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f27.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1a🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f26.1e100.net
A172.253.116.27🇺🇸 Google172.253.116.0/24
PTRdj-in-f27.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b🇬🇧 Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.26🇺🇸 Google192.178.223.0/24
PTRyulhrs-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1b🇧🇪 Google2a00:1450:400c::/48
PTRyubrupd-in-f27.1e100.net
A172.253.157.27🇺🇸 Google172.253.0.0/16
PTRyubrupd-in-f27.1e100.net
TXTb6ef19fdce
TXTbrevo-code:18bb7a62c5c74e879d3078b975b57cdd
TXTgoogle-site-verification=AfkAe5AGmJkPXevOUmrK7fMiFv1fpFNUl5DOAOOboAI
TXTgoogle-site-verification=kyL1Llr2GNis_s4r09UhdMJQ7Yyb9tLuSeNujBvxBuY
TXTv=spf1 include:dc-aa8e722993._spfm.threatmon.io ~all
SOAguy.ns.cloudflare.comdns@cloudflare.com serial=2411209361

io

DNSSEC🔒 Signed (DS record present)
NSa0.nic.io
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1786155469

Same first word

Similar names

DNS History

18 records (8 active, 10 former)

NSguy.ns.cloudflare.comtegan.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA160.153.0.209104.21.81.97104.26.2.53104.26.3.53172.67.189.16172.67.69.62606:4700:20::681a:2352606:4700:20::681a:3352606:4700:20::ac43:45062606:4700:3031::ac43:bd102606:4700:3035::6815:5161
NSguy.ns.cloudflare.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
NStegan.ns.cloudflare.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
MXalt1.aspmx.l.google.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
MXalt2.aspmx.l.google.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
MXalt3.aspmx.l.google.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
MXalt4.aspmx.l.google.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
MXaspmx.l.google.com2026-04-07 → 2026-08-08 · 2 obs
● 2026-04-07 06:36:40
● 2026-08-08 02:46:30
A104.21.81.972026-04-07 → 2026-04-07 · 3 obs
● 2026-04-07 06:36:40
○ 2026-04-08 18:56:46
○ 2026-08-08 02:46:30
A104.26.2.532026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A104.26.3.532026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A160.153.0.2092026-07-19 → 2026-08-08 · 3 obs
○ 2026-04-08 18:56:46
● 2026-07-19 21:38:04
● 2026-08-08 02:46:30
A172.67.189.162026-04-07 → 2026-04-07 · 3 obs
● 2026-04-07 06:36:40
○ 2026-04-08 18:56:46
○ 2026-08-08 02:46:30
A172.67.69.62026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A2606:4700:20::681a:2352026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A2606:4700:20::681a:3352026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A2606:4700:20::ac43:45062026-04-08 → 2026-04-08 · 4 obs
○ 2026-04-07 06:36:40
● 2026-04-08 18:56:46
○ 2026-07-19 21:38:04
○ 2026-08-08 02:46:30
A2606:4700:3031::ac43:bd102026-04-07 → 2026-04-07 · 3 obs
● 2026-04-07 06:36:40
○ 2026-04-08 18:56:46
○ 2026-08-08 02:46:30
A2606:4700:3035::6815:51612026-04-07 → 2026-04-07 · 3 obs
● 2026-04-07 06:36:40
○ 2026-04-08 18:56:46
○ 2026-08-08 02:46:30

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
iob0.nic.io, c0.nic.io, a0.nic.io, a2.nic.io-
threatmon.ioguy.ns.cloudflare.com, tegan.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.226

NS records: guy.ns.cloudflare.com, tegan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for threatmon.io (unsigned zone)

⏱️ Timing

Total: 561ms | Queries: -

📄 Records

TypeCountSample Data
A1160.153.0.209
NS2guy.ns.cloudflare.com, tegan.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT5b6ef19fdce, brevo-code:18bb7a62c5c74e879d3078b975b57...
SOA1guy.ns.cloudflare.com dns.cloudflare.com

Analysis

IP Addresses

threatmon.io points to a single IP number: 160.153.0.209.

Additional host names — evergreencleaninggroup.com, udvegas.com, colormyworldinc.com and two others — share IP numbers with threatmon.io.

Name Servers

DNS delegation for threatmon.io points to two name servers: guy.ns.cloudflare.com and tegan.ns.cloudflare.com.

threatmon.io shares its name server setup with other domains, including seznamka137.top, macsonuclari.com.tr, looknav.com and two others.

threatmon.io has at least partial name server overlap with other domains, such as rdjke.ink, mattrandle.me, getfinancialhelp.org and two others.

These name servers tend to appear together with the name servers mustafa.ns.cloudflare.com, ines.ns.cloudflare.com and melinda.ns.cloudflare.com.

Host names with 6 IP numbers:

guy.ns.cloudflare.com has IP addresses 108.162.193.173, 172.64.33.173 and 173.245.59.173, plus 3 other.

tegan.ns.cloudflare.com has IP addresses 108.162.192.226, 172.64.32.226 and 173.245.58.226, plus 3 other.

Mail Servers

threatmon.io is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

threatmon.io shares mail servers — at least in part — with other domains, including lidango.com, cesiss.com, kkamau.com and two others.

These mail servers are frequently used alongside mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 other.

Host names with two IP numbers:

aspmx.l.google.com has two IP addresses: 172.253.62.26 and 2607:f8b0:4004:c07::1b.

alt1.aspmx.l.google.com has two IP addresses: 108.177.123.27 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com has two IP addresses: 172.253.116.27 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com has two IP addresses: 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com has two IP addresses: 172.253.157.27 and 2a00:1450:400c:c23::1b.