rootkit.eu - dns.ninja

rootkit.eu

DNSSECโš ๏ธ Not signed
A2a0e:4001:11::1๐Ÿ‡ฌ๐Ÿ‡ง AS229272000::/3
A5.83.210.1๐Ÿ‡ฌ๐Ÿ‡ง SCALAXY-AS5.83.210.0/24
NSns4.nameshift.com โญ
A2a0e:4001:10::4๐Ÿ‡ฌ๐Ÿ‡ง AS229272000::/3
A5.83.212.4๐Ÿ‡ฌ๐Ÿ‡ง AS2140255.83.212.0/24
PTRns4.nameshift.com
NSns5.nameshift.com
A2a0e:4001:10::5๐Ÿ‡ฌ๐Ÿ‡ง AS229272000::/3
A5.83.212.5๐Ÿ‡ฌ๐Ÿ‡ง AS2140255.83.212.0/24
PTRns5.nameshift.com
TXTv=spf1 -all
SOAns4.nameshift.comhostmaster@nameshift.com serial=1786338000

eu

DNSSEC๐Ÿ”’ Signed (DS record present)
NSsi.dns.eu โญ
NSbe.dns.eu
NSw.dns.eu
NSx.dns.eu
NSy.dns.eu
SOAsi.dns.eutech@eurid.eu serial=1126924663

Same first word

Similar names

DNS History

23 records (4 active, 19 former)

20162017201820192020202120222023202420252026NSns4.nameshift.comns5.nameshift.coma.gpk.eub.gpk.euc.gpk.euns1.gpk.euns1.sedoparking.comns2.gpk.euns2.sedoparking.comns3.gpk.euMXlocalhostA2a0e:4001:11::15.83.210.1109.235.63.103134.199.240.162209.38.54.191209.38.6.61212.227.255.1282604:a880:4:1d0:0:1:2626:a0002604:a880:800:14:0:1:f06c:60002a03:b0c0:2:f0::fc3a:e00152.58.78.1664.190.63.222
โ—‹NSa.gpk.eu2018-10-09 โ†’ 2018-10-09 ยท 4 obs
โ—‹ 2017-02-10 06:58:30
โ— 2018-10-09 04:59:22
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹NSb.gpk.eu2018-10-09 โ†’ 2018-10-09 ยท 4 obs
โ—‹ 2017-02-10 06:58:30
โ— 2018-10-09 04:59:22
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹NSc.gpk.eu2018-10-09 โ†’ 2018-10-09 ยท 4 obs
โ—‹ 2017-02-10 06:58:30
โ— 2018-10-09 04:59:22
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹NSns1.gpk.eu2015-07-02 โ†’ 2017-02-10 ยท 4 obs
โ— 2015-07-02 18:25:56
โ— 2017-02-10 06:58:30
โ—‹ 2018-10-09 04:59:22
โ—‹ 2026-08-10 05:33:02
โ—‹NSns1.sedoparking.com2026-03-04 โ†’ 2026-08-10 ยท 2 obs
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹NSns2.gpk.eu2015-07-02 โ†’ 2017-02-10 ยท 4 obs
โ— 2015-07-02 18:25:56
โ— 2017-02-10 06:58:30
โ—‹ 2018-10-09 04:59:22
โ—‹ 2026-08-10 05:33:02
โ—‹NSns2.sedoparking.com2026-03-04 โ†’ 2026-08-10 ยท 2 obs
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹NSns3.gpk.eu2015-07-02 โ†’ 2017-02-10 ยท 4 obs
โ— 2015-07-02 18:25:56
โ— 2017-02-10 06:58:30
โ—‹ 2018-10-09 04:59:22
โ—‹ 2026-08-10 05:33:02
โ—NSns4.nameshift.com2026-03-04 โ†’ 2026-08-10 ยท 3 obs
โ—‹ 2018-10-09 04:59:22
โ— 2026-03-04 03:28:08
โ— 2026-08-10 05:33:02
โ—NSns5.nameshift.com2026-03-04 โ†’ 2026-08-10 ยท 3 obs
โ—‹ 2018-10-09 04:59:22
โ— 2026-03-04 03:28:08
โ— 2026-08-10 05:33:02
โ—‹MXlocalhost2026-03-04 โ†’ 2026-08-10 ยท 2 obs
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹A109.235.63.1032015-07-02 โ†’ 2016-04-26 ยท 4 obs
โ— 2015-07-02 18:25:56
โ— 2016-04-26 15:53:50
โ—‹ 2017-02-10 06:58:30
โ—‹ 2026-08-10 05:33:02
โ—‹A134.199.240.1622026-04-15 โ†’ 2026-04-15 ยท 4 obs
โ—‹ 2026-04-09 09:26:38
โ— 2026-04-15 16:36:18
โ—‹ 2026-06-06 07:42:02
โ—‹ 2026-08-10 05:33:02
โ—‹A209.38.54.1912026-03-04 โ†’ 2026-06-17 ยท 8 obs
โ—‹ 2018-10-09 04:59:22
โ— 2026-03-04 03:28:08
โ—‹ 2026-04-09 09:26:38
โ—‹ 2026-04-15 16:36:18
โ— 2026-06-06 07:42:02
โ— 2026-06-17 15:51:40
โ—‹ 2026-07-27 06:59:08
โ—‹ 2026-08-10 05:33:02
โ—‹A209.38.6.612026-04-09 โ†’ 2026-04-09 ยท 4 obs
โ—‹ 2026-03-04 03:28:08
โ— 2026-04-09 09:26:38
โ—‹ 2026-04-15 16:36:18
โ—‹ 2026-08-10 05:33:02
โ—‹A212.227.255.1282017-02-10 โ†’ 2017-02-10 ยท 4 obs
โ—‹ 2016-04-26 15:53:50
โ— 2017-02-10 06:58:30
โ—‹ 2018-10-09 04:59:22
โ—‹ 2026-08-10 05:33:02
โ—‹A2604:a880:4:1d0:0:1:2626:a0002026-04-09 โ†’ 2026-04-09 ยท 4 obs
โ—‹ 2026-03-04 03:28:08
โ— 2026-04-09 09:26:38
โ—‹ 2026-04-15 16:36:18
โ—‹ 2026-08-10 05:33:02
โ—‹A2604:a880:800:14:0:1:f06c:60002026-04-15 โ†’ 2026-04-15 ยท 4 obs
โ—‹ 2026-04-09 09:26:38
โ— 2026-04-15 16:36:18
โ—‹ 2026-06-06 07:42:02
โ—‹ 2026-08-10 05:33:02
โ—‹A2a03:b0c0:2:f0::fc3a:e0012026-03-04 โ†’ 2026-06-17 ยท 8 obs
โ—‹ 2018-10-09 04:59:22
โ— 2026-03-04 03:28:08
โ—‹ 2026-04-09 09:26:38
โ—‹ 2026-04-15 16:36:18
โ— 2026-06-06 07:42:02
โ— 2026-06-17 15:51:40
โ—‹ 2026-07-27 06:59:08
โ—‹ 2026-08-10 05:33:02
โ—A2a0e:4001:11::12026-07-27 โ†’ 2026-08-10 ยท 3 obs
โ—‹ 2026-06-17 15:51:40
โ— 2026-07-27 06:59:08
โ— 2026-08-10 05:33:02
โ—A5.83.210.12026-07-27 โ†’ 2026-08-10 ยท 3 obs
โ—‹ 2026-06-17 15:51:40
โ— 2026-07-27 06:59:08
โ— 2026-08-10 05:33:02
โ—‹A52.58.78.162018-10-09 โ†’ 2018-10-09 ยท 4 obs
โ—‹ 2017-02-10 06:58:30
โ— 2018-10-09 04:59:22
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02
โ—‹A64.190.63.2222026-03-04 โ†’ 2026-08-10 ยท 2 obs
โ—‹ 2026-03-04 03:28:08
โ—‹ 2026-08-10 05:33:02

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
eube.dns.eu, x.dns.eu, y.dns.eu, w.dns.eu...-
rootkit.euns5.nameshift.com, ns4.nameshift.com-

โœ… Authoritative Response

Server:5.83.212.4

NS records: ns5.nameshift.com, ns4.nameshift.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for rootkit.eu (unsigned zone)

โฑ๏ธ Timing

Total: 471ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A15.83.210.1
AAAA12a0e:4001:11::1
NS2ns4.nameshift.com, ns5.nameshift.com
MX1. (pri: 0)
TXT1v=spf1 -all
SOA1ns4.nameshift.com hostmaster.nameshift.c

Analysis

IP Addresses

rootkit.eu directs to two IP numbers, 5.83.210.1 and 2a0e:4001:11::1

lacta.de, ten-dam.nl, almanac.se plus two other host names have IP numbers in common with rootkit.eu.

Name Servers

rootkit.eu has two authoritative name servers โ€” ns4.nameshift.com and ns5.nameshift.com.

The name server configuration of rootkit.eu is shared with other domains, for instance unternehmerstudie.de, mail.19067.de, geoff.eu and two others.

rootkit.eu partially shares its NS delegation with several other domains, including teaches.de, mail.energybikes.de, carrs.de and two others.

Both ns4.nameshift.com and ns5.nameshift.com have two IP addresses each. ns4.nameshift.com resolves to 5.83.212.4 and 2a0e:4001:10::4; ns5.nameshift.com resolves to 5.83.212.5 and 2a0e:4001:10::5.