rootkit.io - dns.ninja

rootkit.io

DNSSEC⚠️ Not signed
A15.235.207.91🇸🇬 OVH15.235.128.0/17 Hosting route
PTRpremiumdoms.io
NSns1.premiumdoms.io
A15.235.207.91🇸🇬 OVH15.235.128.0/17 Hosting route
PTRpremiumdoms.io
NSns2.premiumdoms.io
A15.235.207.91🇸🇬 OVH15.235.128.0/17 Hosting route
PTRpremiumdoms.io
TXTnameshift=cw0gk2
TXT3edae6422655b544fadec6f8d044fa4f88331ed6
TXT56bbda8726764ffcad38ff5414fc4ce7
TXTafternic-verification-WAGbpNQ88xSRJxZ7EbbzF2
TXT2cw5ntfsdpkgd5ynahgmhpyqnu
TXTd0add6ccb21bd461f70d01ccc3bf106d4867cd053b384de201e3022b05f1ccac
TXTtsx80ms50hm6j7y7w97ce9kyrm43h5t95d7hjj5r
TXT961de0bf-0042-4654-85ab-37e418504448
TXT39705e7dbd9865f4e600700bdb849a2cd21d9f16
TXTsaw-market=2bedfc79-a526-4a9c-864e-c17cc5efaa50
TXTsaw-market=a9e53b25-7298-4c48-94a1-cbf578c61394
SOAns1.premiumdoms.ioroot@host.premiumdoms.io 2026-08-04 #0

io

DNSSEC🔒 Signed (DS record present)
NSa0.nic.io
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1786364916

Same first word

Similar names

DNS History

9 records (3 active, 6 former)

20192020202120222023202420252026NSns1.premiumdoms.ions2.premiumdoms.iocdns.ovh.netns1.parkingcrew.netns2.parkingcrew.netvps-d31c452c.vps.ovh.caMXmail.h-email.netA15.235.207.91185.53.178.9
NScdns.ovh.net2026-02-16 → 2026-05-20 · 5 obs
○ 2018-10-09 04:50:26
● 2026-02-16 02:51:40
● 2026-05-20 00:10:44
○ 2026-06-23 18:23:48
○ 2026-08-10 12:35:02
NSns1.parkingcrew.net2018-10-09 → 2018-10-09 · 3 obs
● 2018-10-09 04:50:26
○ 2026-02-16 02:51:40
○ 2026-08-10 12:35:02
NSns1.premiumdoms.io2026-02-16 → 2026-08-10 · 3 obs
○ 2018-10-09 04:50:26
● 2026-02-16 02:51:40
● 2026-08-10 12:35:02
NSns2.parkingcrew.net2018-10-09 → 2018-10-09 · 3 obs
● 2018-10-09 04:50:26
○ 2026-02-16 02:51:40
○ 2026-08-10 12:35:02
NSns2.premiumdoms.io2026-02-16 → 2026-08-10 · 3 obs
○ 2018-10-09 04:50:26
● 2026-02-16 02:51:40
● 2026-08-10 12:35:02
NSvps-d31c452c.vps.ovh.ca2026-02-16 → 2026-05-20 · 5 obs
○ 2018-10-09 04:50:26
● 2026-02-16 02:51:40
● 2026-05-20 00:10:44
○ 2026-06-23 18:23:48
○ 2026-08-10 12:35:02
MXmail.h-email.net2018-10-09 → 2026-02-16 · 4 obs
● 2018-10-09 04:50:26
● 2026-02-16 03:50:34
○ 2026-02-18 21:13:14
○ 2026-08-10 12:35:02
A15.235.207.912026-02-16 → 2026-08-10 · 3 obs
○ 2018-10-09 04:50:26
● 2026-02-16 02:51:40
● 2026-08-10 12:35:02
A185.53.178.92018-10-09 → 2018-10-09 · 3 obs
● 2018-10-09 04:50:26
○ 2026-02-16 02:51:40
○ 2026-08-10 12:35:02

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
ioa0.nic.io, a2.nic.io, b0.nic.io, c0.nic.io-
rootkit.ions1.premiumdoms.io, ns2.premiumdoms.io2 records

✅ Authoritative Response

Server:15.235.207.91

NS records: ns1.premiumdoms.io, ns2.premiumdoms.io

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for rootkit.io (unsigned zone)

⏱️ Timing

Total: 621ms | Queries: -

📄 Records

TypeCountSample Data
A115.235.207.91
NS2ns2.premiumdoms.io, ns1.premiumdoms.io
TXT11nameshift=cw0gk2, 3edae6422655b544fadec6f8d044fa4f88331ed6...
SOA1ns1.premiumdoms.io root.host.premiumdoms

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (ns2.premiumdoms.io, ns1.premiumdoms.io)

Analysis

IP Addresses

rootkit.io points to a single IP number: 15.235.207.91.

Additional host names — compta.xyz, bid.gg, vibecoder.si and two others — share IP numbers with rootkit.io.

Name Servers

The NS records for rootkit.io delegate to ns1.premiumdoms.io and ns2.premiumdoms.io.

rootkit.io shares its name server setup with other domains, including dgshijsbj.com, tds.si, shellcode.sh and two others.

Each of ns1.premiumdoms.io and ns2.premiumdoms.io points to exactly one IP address: 15.235.207.91.

ns1.premiumdoms.io and ns2.premiumdoms.io each have 15.235.207.91 IP addresses.