`wormradar.net`

DNSSEC	⚠️ Not signed
A	69.94.64.89^{🇨🇿 AVAST-AS-DC69.94.64.0/24}
A	166.98.243.23^{🇺🇸 AS16733166.98.242.0/23 Proxy registration to prevent harm from ARIN-NONAUTH shutdown}
NS	`ns1.markmonitor.com` ⭐
		A	2620:10a:80a8::1^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.1^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns2.markmonitor.com`
		A	2001:67c:10b8::1^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns2.markmonitor.com`
		A	176.97.158.1^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns2.markmonitor.com`
NS	`ns3.markmonitor.com`
		A	2620:10a:80a9::1^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.1^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns4.markmonitor.com`
		A	2001:67c:1bc::1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast}
			PTR	`ns1.markmonitor.com`
		A	192.174.68.1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net}
			PTR	`ns1.markmonitor.com`
NS	`ns5.markmonitor.com`
		A	2620:10a:80a8::2^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.2^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns6.markmonitor.com`
		A	2001:67c:10b8::3^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns6.markmonitor.com`
		A	176.97.158.3^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns6.markmonitor.com`
NS	`ns7.markmonitor.com`
		A	2620:10a:80a9::2^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.2^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
TXT	`v=spf1 -all`
SOA	`ns1.markmonitor.com`hostmaster@markmonitor.com 2025-06-03 #2

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1774618517

Same first word

wormradar.com

wormradar.org

wormradar.net

DNS History

13 records (9 active, 4 former)

○NSatl-gtm.explabs.com2015-06-05 → 2016-08-11 · 4 obs

● 2015-06-05 17:45:08
● 2016-08-11 09:57:08
○ 2017-07-04 19:12:42
○ 2026-03-27 13:40:42

●NSns1.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns2.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns3.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns4.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns5.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns6.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●NSns7.markmonitor.com2017-07-04 → 2026-03-27 · 3 obs

○ 2016-08-11 09:57:08
● 2017-07-04 19:12:42
● 2026-03-27 13:40:42

●A166.98.243.232026-03-15 → 2026-03-27 · 3 obs

○ 2017-07-04 19:12:42
● 2026-03-15 19:05:48
● 2026-03-27 13:40:42

○A173.245.115.1092017-07-04 → 2017-07-04 · 3 obs

● 2017-07-04 19:12:42
○ 2026-03-15 19:05:48
○ 2026-03-27 13:40:42

○A212.96.161.1092017-07-04 → 2017-07-04 · 3 obs

● 2017-07-04 19:12:42
○ 2026-03-15 19:05:48
○ 2026-03-27 13:40:42

●A69.94.64.892026-03-15 → 2026-03-27 · 3 obs

○ 2017-07-04 19:12:42
● 2026-03-15 19:05:48
● 2026-03-27 13:40:42

○A90.181.227.292017-07-04 → 2017-07-04 · 3 obs

● 2017-07-04 19:12:42
○ 2026-03-15 19:05:48
○ 2026-03-27 13:40:42

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	g.gtld-servers.net, c.gtld-servers.net, a.gtld-servers.net, i.gtld-servers.net...	-
wormradar.net	ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com...	-

✅ Authoritative Response

Server:149.112.160.1

NS records: ns1.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com, ns7.markmonitor.com, ns2.markmonitor.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for wormradar.net (unsigned zone)

⏱️ Timing

Total: 2490ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`69.94.64.89, 166.98.243.23`
NS	7	`ns1.markmonitor.com, ns2.markmonitor.com...`
TXT	1	`v=spf1 -all`
SOA	1	`ns1.markmonitor.com hostmaster.markmonit`

Analysis

IP Addresses

wormradar.net points to two IP numbers: 69.94.64.89 and 166.98.243.23.

Other host names, for instance kyber-lapkove.com, avgtech.ru, avgzen.com, avgtechnologies.ie and avgpedia.com share IP numbers with wormradar.net.

Name Servers

wormradar.net delegates to seven name servers: ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com and ns7.markmonitor.com.

wormradar.net at least partially shares its name servers with other domains, for instance 935gosho257.com, elixirstrings.com.cn, mouser.my, muurikka.de and twilioapps.com.