`exploitpreventionlabs.net`

DNSSEC	⚠️ Not signed
A	69.94.75.40^{🇨🇿 AVAST-AS-DC69.94.75.0/24}
A	166.98.243.23^{🇺🇸 AS16733166.98.242.0/23 Proxy registration to prevent harm from ARIN-NONAUTH shutdown}
NS	`ns1.markmonitor.com` ⭐
		A	2620:10a:80a8::1^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.1^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns2.markmonitor.com`
		A	2001:67c:10b8::1^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns2.markmonitor.com`
		A	176.97.158.1^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns2.markmonitor.com`
NS	`ns3.markmonitor.com`
		A	2620:10a:80a9::1^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.1^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns4.markmonitor.com`
		A	2001:67c:1bc::1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast}
			PTR	`ns1.markmonitor.com`
		A	192.174.68.1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net}
			PTR	`ns1.markmonitor.com`
NS	`ns5.markmonitor.com`
		A	2620:10a:80a8::2^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.2^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns6.markmonitor.com`
		A	2001:67c:10b8::3^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns6.markmonitor.com`
		A	176.97.158.3^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns6.markmonitor.com`
NS	`ns7.markmonitor.com`
		A	2620:10a:80a9::2^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.2^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
TXT	`v=spf1 -all`
SOA	`ns1.markmonitor.com`hostmaster@markmonitor.com 2026-06-01 #1

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785009782

Same first word

exploitpreventionlabs.net

exploitpreventionlabs.com

DNS History

15 records (9 active, 6 former)

○NSatl-gtm.explabs.com2015-07-06 → 2016-06-18 · 4 obs

● 2015-07-06 15:33:42
● 2016-06-18 12:50:02
○ 2017-02-16 13:46:10
○ 2026-07-25 20:22:42

●NSns1.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns2.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns3.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns4.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns5.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns6.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●NSns7.markmonitor.com2017-02-16 → 2026-07-25 · 3 obs

○ 2016-06-18 12:50:02
● 2017-02-16 13:46:10
● 2026-07-25 20:22:42

●A166.98.243.232026-07-20 → 2026-07-25 · 3 obs

○ 2020-01-04 20:18:52
● 2026-07-20 00:38:08
● 2026-07-25 20:22:42

○A173.245.115.1092017-02-16 → 2017-02-16 · 3 obs

● 2017-02-16 13:46:10
○ 2020-01-04 20:18:52
○ 2026-07-25 20:22:42

○A185.189.92.292020-01-04 → 2020-01-04 · 4 obs

○ 2017-02-16 13:46:10
● 2020-01-04 20:18:52
○ 2026-07-20 00:38:08
○ 2026-07-25 20:22:42

○A212.96.161.1092017-02-16 → 2017-02-16 · 3 obs

● 2017-02-16 13:46:10
○ 2020-01-04 20:18:52
○ 2026-07-25 20:22:42

○A69.94.64.92020-01-04 → 2020-01-04 · 4 obs

○ 2017-02-16 13:46:10
● 2020-01-04 20:18:52
○ 2026-07-20 00:38:08
○ 2026-07-25 20:22:42

●A69.94.75.402026-07-20 → 2026-07-25 · 3 obs

○ 2020-01-04 20:18:52
● 2026-07-20 00:38:08
● 2026-07-25 20:22:42

○A90.181.227.292017-02-16 → 2017-02-16 · 3 obs

● 2017-02-16 13:46:10
○ 2020-01-04 20:18:52
○ 2026-07-25 20:22:42

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
exploitpreventionlabs.net	ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com...	-

✅ Authoritative Response

Server:149.112.160.2

NS records: ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com, ns7.markmonitor.com, ns2.markmonitor.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for exploitpreventionlabs.net (unsigned zone)

⏱️ Timing

Total: 539ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`69.94.75.40, 166.98.243.23`
NS	7	`ns1.markmonitor.com, ns2.markmonitor.com...`
TXT	1	`v=spf1 -all`
SOA	1	`ns1.markmonitor.com hostmaster.markmonit`

Analysis

IP Addresses

exploitpreventionlabs.net has two IP addresses: 69.94.75.40 and 166.98.243.23

bsecure.com, wormradar.com, cyber-lapka.com plus two other host names have IP numbers in common with exploitpreventionlabs.net.

Name Servers

The DNS delegation for exploitpreventionlabs.net covers 7 name servers: ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com and 4 more.

There is at least partial name server overlap between exploitpreventionlabs.net and other domains — waldorfastoriaberlin.de, larrysherwood.com, taxlifecycle360.com and two more among them.

These name servers tend to appear in combination with the name servers ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com and ns7.markmonitor.com.

Host names pointing to two IP addresses:

ns1.markmonitor.com maps to two IP addresses — 149.112.160.1 and 2620:10a:80a8::1.

ns2.markmonitor.com maps to two IP addresses — 176.97.158.1 and 2001:67c:10b8::1.

ns3.markmonitor.com maps to two IP addresses — 149.112.161.1 and 2620:10a:80a9::1.

ns4.markmonitor.com maps to two IP addresses — 192.174.68.1 and 2001:67c:1bc::1.

ns5.markmonitor.com maps to two IP addresses — 149.112.160.2 and 2620:10a:80a8::2.

ns6.markmonitor.com maps to two IP addresses — 176.97.158.3 and 2001:67c:10b8::3.

ns7.markmonitor.com maps to two IP addresses — 149.112.161.2 and 2620:10a:80a9::2.

exploitpreventionlabs.net - robtex.com