CF1761896558118-tsm20251029173950

WWW.RTSAK.COM - malware.builders

Search for IP or hostnames:

malware.builders checked at 2025-10-31T07:42:37.995Z 1422ms 90/90/90 100% R:8

malware.builders

NSns45.domaincontrol.com
A2603:5:2162::17 🇺🇸 GODADDY-DNS-GLOBAL
PTRns45.domaincontrol.com
A97.74.102.23🇺🇸 GODADDY-DNS-GLOBAL
PTRns45.domaincontrol.com
NSns46.domaincontrol.com
A2603:5:2262::17 🇺🇸 GODADDY-DNS-GLOBAL
PTRns46.domaincontrol.com
A173.201.70.23🇺🇸 GODADDY-DNS-GLOBAL
PTRns46.domaincontrol.com
MXmailstore1.secureserver.net
A216.69.141.78🇺🇸 AS398101
PTRosplibsmtp01-v02.prod.phx3.secureserver.net
A216.69.141.114🇺🇸 AS398101
PTRosplibsmtp03-v02.prod.phx3.secureserver.net
A216.69.141.162🇺🇸 AS398101
PTRosplibsmtp02-v02.prod.phx3.secureserver.net
MXsmtp.secureserver.net
A92.204.80.0🇫🇷 GODADDY-SXB
PTRsxb1plibsmtp01-v01.prod.sxb1.secureserver.net
A3.33.130.190🇺🇸 Amazon
PTRa2aa9ff50de748dbe.awsglobalaccelerator.com
A15.197.148.33🇺🇸 Amazon
PTRa2aa9ff50de748dbe.awsglobalaccelerator.com

builders

NSv0n0.nic.builders
NSv0n1.nic.builders
NSv0n2.nic.builders
NSv0n3.nic.builders
NSv2n0.nic.builders
NSv2n1.nic.builders

Starts with same word

Starts similarily

AI analysis

malware.builders resolves to two IPs: 3.33.130.190 and 15.197.148.33.

other host names for instance snappowerx.com, pncn.me, bbc-llc.com, storwins.com and livezonavillage.com share IP numbers with malware.builders.

malware.builders is delegated to two name servers: ns45.domaincontrol.com and ns46.domaincontrol.com.

malware.builders shares the same name server setup as other domains, for example imagine-books.com, cartes-na.com, myttax.com, internetautosalesinc.net and jkornfeld.net.

Host names with two IP numbers:

ns45.domaincontrol.com points to 2603:5:2162::17 and 97.74.102.23

ns46.domaincontrol.com points to 2603:5:2262::17 and 173.201.70.23

malware.builders is handled by two mail servers: mailstore1.secureserver.net and smtp.secureserver.net.

malware.builders shares the same mail server setup as other domains, for instance artlist.info, top10smbloans.com, new-oem-parts.com, aevalouise.com and jamesbakey.com.

malware.builders shares some mail servers with other domains at least partially, for example imjj.photography.

Three IP numbers for a host:

The host name mailstore1.secureserver.net points to: 216.69.141.78, 216.69.141.114 and 216.69.141.162.

One IP number for a host:

The host name smtp.secureserver.net points to: 92.204.80.0.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

htnhbFx CF johedugfp 2025-10-31