Skip to content

Hostname

mal.do

Last fetched

mal.do resolves to 2 IPv4 addresses operated by AMAZON-AES - Amazon.com, Inc. in US.

Nutrition Label

WHISPER CANON · mal.doRouting diversity2.4/10Peering density6.8/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency0.0/10Resolver footprint8.0/10canon.whisper.security/host/mal.do

Resolution chain

mal.do resolves to 2 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
3.215.100.793.208.0.0/12AS14618AMAZON-AES - Amazon.com, Inc.US
3.234.189.1333.224.0.0/12AS14618AMAZON-AES - Amazon.com, Inc.US

WHOIS identity

No WHOIS records are currently associated with mal.do in WhisperGraph.

Subdomains

2 observed subdomains of mal.do.

Subdomain
links.mal.do
www.mal.do

Web-graph footprint

Distinct hostnames that link to or from mal.do in the public web crawl.

65 sites linked to from this hostname.

Sample inbound links

Sample outbound links

Threat posture

History

Related pages

Pivot deeper into the graph from mal.do.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "mal.do"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.