CF1757377857156-tsm20250908202611

DNSWHOIS.INFO - malware.messagelabs.com

Search for IP or hostnames:

malware.messagelabs.com checked at 2025-09-09T00:30:57.142Z 236ms 98/98/98 100% R:9

`malware.messagelabs.com`

	MX	`cluster6.eu.messagelabs.com`
			A	85.158.142.210^{🇬🇧 Amazon}
				PTR	`mail834.messagelabs.com`
			A	85.158.142.214^{🇬🇧 Amazon}
				PTR	`mail838.messagelabs.com`
			A	85.158.142.215^{🇬🇧 Amazon}
				PTR	`mail839.messagelabs.com`
			A	195.245.230.200^{🇬🇧 Amazon}
				PTR	`mail858.messagelabs.com`
			A	195.245.230.201^{🇬🇧 Amazon}
				PTR	`mail859.messagelabs.com`
			A	195.245.230.202^{🇬🇧 Amazon}
				PTR	`mail860.messagelabs.com`
			A	195.245.231.72^{🇬🇧 Amazon}
				PTR	`mail876.messagelabs.com`
			A	195.245.231.75^{🇬🇧 Amazon}
				PTR	`mail879.messagelabs.com`
	MX	`cluster6a.eu.messagelabs.com`
			A	85.158.142.210^{🇬🇧 Amazon}
				PTR	`mail834.messagelabs.com`
			A	85.158.142.214^{🇬🇧 Amazon}
				PTR	`mail838.messagelabs.com`
			A	85.158.142.215^{🇬🇧 Amazon}
				PTR	`mail839.messagelabs.com`
			A	195.245.230.200^{🇬🇧 Amazon}
				PTR	`mail858.messagelabs.com`
			A	195.245.230.201^{🇬🇧 Amazon}
				PTR	`mail859.messagelabs.com`
			A	195.245.230.202^{🇬🇧 Amazon}
				PTR	`mail860.messagelabs.com`
			A	195.245.231.69^{🇬🇧 Amazon}
				PTR	`mail874.messagelabs.com`
			A	195.245.231.75^{🇬🇧 Amazon}
				PTR	`mail879.messagelabs.com`

`messagelabs.com`

	NS	`ns-453.awsdns-56.com`
	NS	`ns-520.awsdns-01.net`
	NS	`ns-1296.awsdns-34.org`
	MX	`cluster6.eu.messagelabs.com`
	MX	`cluster6a.eu.messagelabs.com`
	NS	`ns-1714.awsdns-22.co.uk`
	A	50.112.202.115^{🇺🇸 Amazon}
	A	52.13.171.212^{🇺🇸 Amazon}
	A	54.68.22.26^{🇺🇸 Amazon}

rank #93948 globally
rank #46999 in the tld

Starts with same word
`malware.be`
`malware.porn`
`malware.exchange`
`malware.today`
`malware.cn`
`malware.cc`
`malware.biz`
`malware.center`
`malware.se`
`malware.farm`
`malware.sx`
`malware.wtf`
`malware.cl`
`malware.directory`
`malware.su`
`malware.expert`
`malware.builders`
`malware.win`
`malware.mobi`
`malware.com.br`
`malware.zip`
`malware.ai`
`malware.xyz`
`malware.email`
`malware.ltd`
`malware.guru`
`malware.tv`
`malware.zone`
`malware.fr`
`malware.ro`
`malware.lu`
`malware.community`
`malware.org`
`malware.re`
`malware.me`
`malware.watch`
`malware.no`
`malware.cz`
`malware.careers`
`malware.at`
`malware.exposed`
`malware.solutions`
`malware.business`
`malware.eu`
`malware.net`
`malware.in`
`malware.pl`
`malware.fox`

Starts similarily
`malware.eu`
`malware.net`
`malware.in`
`malware.pl`
`malware.fox`
`malware.be`
`malware.porn`
`malware.exchange`
`malware.today`
`malware.cn`
`malware.cc`
`malware.biz`
`malware.center`
`malware.se`
`lawream.com`
`malware.farm`
`malware.sx`
`malware.wtf`
`malware.cl`
`malware.directory`
`malware.su`
`mawlare.net`
`malware.expert`
`malware.builders`
`malware.win`
`malware.mobi`
`malware.com.br`
`malware.zip`
`malware.ai`
`malware.xyz`
`malware.email`
`malware.ltd`
`malwear.co`
`malwear.org`
`realawm.com`
`malware.guru`
`amerlaw.com`
`malware.tv`
`malware.zone`
`malware.fr`
`malware.ro`
`malware.lu`
`reamlaw.net`
`reamlaw.com`
`malware.community`
`malware.org`
`meralaw.com`
`malware.re`
`marwael.fr`
`malware.me`
`malware.watch`
`malware.no`
`malware.cz`
`malware.careers`
`malwear.wtf`
`amlware.com`
`malware.at`
`elmarwa.com`
`malware.exposed`
`malwear.com`
`amrelaw.com`
`malware.solutions`
`malware.business`
`rawmale.com`

AI analysis

Two mail servers, cluster6.eu.messagelabs.com and cluster6a.eu.messagelabs.com, manage malware.messagelabs.com.

Just like the domains smtpauth.us.messagelabs.com, mail354.messagelabs.com, tower-130.messagelabs.com, solowaymail190.messagelabs.com, and mail91.messagelabs.com, malware.messagelabs.com also has the same mail server setup.

cluster6.eu.messagelabs.com and cluster6a.eu.messagelabs.com point to the same eight IP numbers: 85.158.142.210, 85.158.142.214, 85.158.142.215, 195.245.230.200, 195.245.230.201, 195.245.230.202, 195.245.231.72, and 195.245.231.75, with the only difference being cluster6a.eu.messagelabs.com also includes 195.245.231.69.

dbq

jRDSozY CF johedugfp 2025-09-09