`hacktoberfest.ws`

DNSSEC	⚠️ Not signed
A	15.197.70.98^{🇺🇸 Amazon15.197.64.0/20}
		PTR	`a70384359927a67a2.awsglobalaccelerator.com`
NS	`ns1.markmonitor.com` ⭐
		A	2620:10a:80a8::1^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.1^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns2.markmonitor.com`
		A	2001:67c:10b8::1^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns2.markmonitor.com`
		A	176.97.158.1^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns2.markmonitor.com`
NS	`ns3.markmonitor.com`
		A	2620:10a:80a9::1^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.1^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns4.markmonitor.com`
		A	2001:67c:1bc::1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast}
			PTR	`ns1.markmonitor.com`
		A	192.174.68.1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net}
			PTR	`ns1.markmonitor.com`
TXT	`v=spf1 -all`
SOA	`ns1.markmonitor.com`hostmaster@markmonitor.com 2026-03-13 #2

`ws`

	DNSSEC	🔒 Signed (DS record present)
	A	64.70.19.33^{🇺🇸 AS356164.70.0.0/18}
	NS	`ns2.dns.ws` ⭐
	NS	`a.dns.ws`
	NS	`ns5.dns.ws`
	NS	`s.dns.ws`
	NS	`us3.dns.ws`
	NS	`us4.dns.ws`
	MX	`mail.worldsite.ws` ⭐
	SOA	`ns2.dns.ws`hostmaster@dns.ws serial=2603240078

Same first word

DNS History

6 records (5 active, 1 former)

●NSns1.markmonitor.com2026-02-27 → 2026-03-24 · 2 obs

● 2026-02-27 08:44:48
● 2026-03-24 18:47:32

●NSns2.markmonitor.com2026-02-27 → 2026-03-24 · 2 obs

● 2026-02-27 08:44:48
● 2026-03-24 18:47:32

●NSns3.markmonitor.com2026-02-27 → 2026-03-24 · 2 obs

● 2026-02-27 08:44:48
● 2026-03-24 18:47:32

●NSns4.markmonitor.com2026-02-27 → 2026-03-24 · 2 obs

● 2026-02-27 08:44:48
● 2026-03-24 18:47:32

●A15.197.70.982026-03-24 → 2026-03-24 · 2 obs

○ 2026-02-27 08:44:48
● 2026-03-24 18:47:32

○A3.33.139.322026-02-27 → 2026-02-27 · 2 obs

● 2026-02-27 08:44:48
○ 2026-03-24 18:47:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
ws	a.dns.ws, s.dns.ws, ns2.dns.ws, ns5.dns.ws...	-
hacktoberfest.ws	ns3.markmonitor.com, ns1.markmonitor.com, ns2.markmonitor.com, ns4.markmonitor.com	-

✅ Authoritative Response

Server:192.174.68.1

NS records: ns3.markmonitor.com, ns1.markmonitor.com, ns2.markmonitor.com, ns4.markmonitor.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hacktoberfest.ws (unsigned zone)

⏱️ Timing

Total: 886ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`15.197.70.98`
NS	4	`ns4.markmonitor.com, ns3.markmonitor.com...`
TXT	1	`v=spf1 -all`
SOA	1	`ns1.markmonitor.com hostmaster.markmonit`

Analysis

IP Addresses

hacktoberfest.ws points to a single IP address: 15.197.70.98.

Other host names such as tulancha.com, receivegrid.org, bathandbodyworks.com.ni, barco.asia and twilio.life share IP numbers with hacktoberfest.ws.

Name Servers

hacktoberfest.ws is delegated to four name servers: ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com and ns4.markmonitor.com.

At least part of the name servers for hacktoberfest.ws are shared with other domains, for instance enterprisevault.net, coinbasenft.org, treefroginsecticides.com, radiocitychritmasshow.com and harpic.fr.

These name servers are often used together with the name servers ns5.markmonitor.com, ns6.markmonitor.com, ns7.markmonitor.com, ha1.markmonitor.zone, ha2.markmonitor.zone, ha3.markmonitor.zone and ha4.markmonitor.zone.

Host names with two IP numbers:

ns1.markmonitor.com points to: 2620:10a:80a8::1 and 149.112.160.1

ns2.markmonitor.com points to: 2001:67c:10b8::1 and 176.97.158.1

ns3.markmonitor.com points to: 2620:10a:80a9::1 and 149.112.161.1

ns4.markmonitor.com points to: 2001:67c:1bc::1 and 192.174.68.1

hacktoberfest.ws - robtex.com