russianmalware.com - dns.ninja

`russianmalware.com`

DNSSEC	⚠️ Not signed
NS	`ns-608.awsdns-12.net` ⭐
		A	2600:9000:5302:6000::1^{🇺🇸 Amazon2600:9000:5302::/48 - CloudFront}
			PTR	`ns-608.awsdns-12.net`
		A	205.251.194.96^{🇺🇸 Amazon205.251.194.0/24 prefix}
			PTR	`ns-608.awsdns-12.net`
NS	`ns-1104.awsdns-10.org`
		A	2600:9000:5304:5000::1^{🇺🇸 Amazon2600:9000:5304::/48 - CloudFront}
			PTR	`ns-1104.awsdns-10.org`
		A	205.251.196.80^{🇺🇸 Amazon205.251.196.0/24 prefix}
			PTR	`ns-1104.awsdns-10.org`
NS	`ns-1705.awsdns-21.co.uk`
		A	2600:9000:5306:a900::1^{🇺🇸 Amazon2600:9000:5306::/48 - CloudFront}
			PTR	`ns-1705.awsdns-21.co.uk`
		A	205.251.198.169^{🇺🇸 Amazon205.251.198.0/24 prefix}
			PTR	`ns-1705.awsdns-21.co.uk`
NS	`ns-40.awsdns-05.com`
		A	2600:9000:5300:2800::1^{🇺🇸 Amazon2600:9000:5300::/48 - CloudFront}
			PTR	`ns-40.awsdns-05.com`
		A	205.251.192.40^{🇺🇸 Amazon205.251.192.0/24 prefix}
MX	`russianmalware-com.mail.protection.outlook.com` ⭐
		A	2a01:111:f403:c946::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-ch1pr04cu00101.inbound.protection.outlook.com`
		A	2a01:111:f403:f908::2^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn8pr05cu00102.inbound.protection.outlook.com`
		A	2a01:111:f403:f913::^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-cy1pr03cu00100.inbound.protection.outlook.com`
		A	2a01:111:f403:f913::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-cy5pr05cu00101.inbound.protection.outlook.com`
		A	52.101.9.2^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-mn2pr02cu00202.inbound.protection.outlook.com`
		A	52.101.11.17^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-sn1pr0501cu00301.inbound.protection.outlook.com`
		A	52.101.41.4^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-sj2pr05cu00204.inbound.protection.outlook.com`
		A	52.101.194.17^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-ch5pr02cu00401.inbound.protection.outlook.com`
TXT	`MS=ms15326859`
SOA	`ns-608.awsdns-12.net`awsdns-hostmaster@amazon.com serial=1

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784604947

Previously NS for

russianmalware.com

Same first word

russianmalware.com

DNS History

10 records (5 active, 5 former)

●NSns-1104.awsdns-10.org2026-03-30 → 2026-07-21 · 3 obs

○ 2018-08-30 04:46:26
● 2026-03-30 05:46:06
● 2026-07-21 03:54:16

●NSns-1705.awsdns-21.co.uk2026-03-30 → 2026-07-21 · 3 obs

○ 2018-08-30 04:46:26
● 2026-03-30 05:46:06
● 2026-07-21 03:54:16

●NSns-40.awsdns-05.com2026-03-30 → 2026-07-21 · 3 obs

○ 2018-08-30 04:46:26
● 2026-03-30 05:46:06
● 2026-07-21 03:54:16

●NSns-608.awsdns-12.net2026-03-30 → 2026-07-21 · 3 obs

○ 2018-08-30 04:46:26
● 2026-03-30 05:46:06
● 2026-07-21 03:54:16

○NSns1.unixisp.net2018-08-30 → 2018-08-30 · 3 obs

● 2018-08-30 04:46:26
○ 2026-03-30 05:46:06
○ 2026-07-21 03:54:16

○NSns2.unixisp.net2018-08-30 → 2018-08-30 · 3 obs

● 2018-08-30 04:46:26
○ 2026-03-30 05:46:06
○ 2026-07-21 03:54:16

○NSrussianmalware.com2018-08-30 → 2018-08-30 · 3 obs

● 2018-08-30 04:46:26
○ 2026-03-30 05:46:06
○ 2026-07-21 03:54:16

●MXrussianmalware-com.mail.protection.outlook.com2026-03-30 → 2026-07-21 · 3 obs

○ 2018-08-30 04:46:26
● 2026-03-30 05:46:06
● 2026-07-21 03:54:16

○MXsmtp-1.unixisp.net2018-08-30 → 2018-08-30 · 3 obs

● 2018-08-30 04:46:26
○ 2026-03-30 05:46:06
○ 2026-07-21 03:54:16

○MXsmtp-2.unixisp.net2018-08-30 → 2018-08-30 · 3 obs

● 2018-08-30 04:46:26
○ 2026-03-30 05:46:06
○ 2026-07-21 03:54:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	c.gtld-servers.net, l.gtld-servers.net, h.gtld-servers.net, j.gtld-servers.net...	-
russianmalware.com	ns-40.awsdns-05.com, ns-608.awsdns-12.net, ns-1705.awsdns-21.co.uk, ns-1104.awsdns-10.org	2 records

✅ Authoritative Response

Server:205.251.192.40

NS records: ns-40.awsdns-05.com, ns-608.awsdns-12.net, ns-1705.awsdns-21.co.uk, ns-1104.awsdns-10.org

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for russianmalware.com (unsigned zone)

⏱️ Timing

Total: 2541ms | Queries: -

📄 Records

Type	Count	Sample Data
NS	4	`ns-1104.awsdns-10.org, ns-1705.awsdns-21.co.uk...`
MX	1	`russianmalware-com.mail.protection.outlo`
TXT	1	`MS=ms15326859`
SOA	1	`ns-608.awsdns-12.net awsdns-hostmaster.a`

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (ns-40.awsdns-05.com, ns-40.awsdns-05.com)

Analysis

Name Servers

The authoritative name servers for russianmalware.com are ns-40.awsdns-05.com, ns-608.awsdns-12.net, ns-1104.awsdns-10.org and ns-1705.awsdns-21.co.uk.

russianmalware.com shares at least some of its name servers with other domains, including d25iu6foaj00gh.cloudfront.net, jiayujin.com, egeappliances.com and two others.

The host names ns-40.awsdns-05.com, ns-608.awsdns-12.net, ns-1104.awsdns-10.org and ns-1705.awsdns-21.co.uk each resolve to two IP addresses: ns-40.awsdns-05.com resolves to 205.251.192.40 and 2600:9000:5300:2800::1; ns-608.awsdns-12.net resolves to 205.251.194.96 and 2600:9000:5302:6000::1; ns-1104.awsdns-10.org resolves to 205.251.196.80 and 2600:9000:5304:5000::1; ns-1705.awsdns-21.co.uk resolves to 205.251.198.169 and 2600:9000:5306:a900::1.

Mail Servers

Mail for russianmalware.com is handled by a single mail server, russianmalware-com.mail.protection.outlook.com.

russianmalware-com.mail.protection.outlook.com resolves to 8 IP addresses — 52.101.9.2, 52.101.11.17, 52.101.41.4 and 5 others.