rootkit.org - dns.ninja

`rootkit.org`

DNSSEC	⚠️ Not signed
A	52.14.138.16^{🇺🇸 Amazon52.14.0.0/16 EC2 CMH prefix}
		PTR	`ec2-52-14-138-16.us-east-2.compute.amazonaws.com`
NS	`ns-452.awsdns-56.com` ⭐
		A	2600:9000:5301:c400::1^{🇺🇸 Amazon2600:9000:5301::/48 - CloudFront}
			PTR	`ns-452.awsdns-56.com`
		A	205.251.193.196^{🇺🇸 Amazon205.251.193.0/24 prefix}
			PTR	`ns-452.awsdns-56.com`
NS	`ns-1271.awsdns-30.org`
		A	2600:9000:5304:f700::1^{🇺🇸 Amazon2600:9000:5304::/48 - CloudFront}
			PTR	`ns-1271.awsdns-30.org`
		A	205.251.196.247^{🇺🇸 Amazon205.251.196.0/24 prefix}
			PTR	`ns-1271.awsdns-30.org`
NS	`ns-1765.awsdns-28.co.uk`
		A	2600:9000:5306:e500::1^{🇺🇸 Amazon2600:9000:5306::/48 - CloudFront}
			PTR	`ns-1765.awsdns-28.co.uk`
		A	205.251.198.229^{🇺🇸 Amazon205.251.198.0/24 prefix}
			PTR	`ns-1765.awsdns-28.co.uk`
NS	`ns-597.awsdns-10.net`
		A	2600:9000:5302:5500::1^{🇺🇸 Amazon2600:9000:5302::/48 - CloudFront}
			PTR	`ns-597.awsdns-10.net`
		A	205.251.194.85^{🇺🇸 Amazon205.251.194.0/24 prefix}
			PTR	`ns-597.awsdns-10.net`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c1b::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`wv-in-f27.1e100.net`
		A	142.251.163.27^{🇺🇸 Google142.251.163.0/24}
			PTR	`wv-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1a^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.26^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.27^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f27.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1a^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f26.1e100.net`
		A	192.178.223.27^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`tiktok-developers-site-verification=CX7j397z3ldZiBjcgN6bfUpPe7YnDrz8`
TXT	`v=spf1 include:_spf.google.com ~all; google-site-verification=0xdENd9zlOGXUkD...`
SOA	`ns-452.awsdns-56.com`awsdns-hostmaster@amazon.com serial=1

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1783953744

Same first word

rootkit.co

rootkit.pl

rootkit.eu

rootkit.net.cn

rootkit.online

rootkit.it

rootkit.se

rootkit.io

rootkit.de

rootkit.org

rootkit.hu

rootkit.me

rootkit.com.cn

rootkit.fr

rootkit.info

rootkit.finance

rootkit.dk

rootkit.ir

rootkit.nl

rootkit.es

rootkit.cc

rootkit.be

rootkit.ca

rootkit.one

rootkit.ru

rootkit.com

Similar names

ototrik.com

ortokit.com

kitroot.com

rotokit.com

trikoot.net

otkrito.com

tortiko.ru

otkrito.ru

irottko.hu

kotrito.com

kotorit.com

trikoto.com

irottko.com

tikroot.com

triokto.de

rikotto.nl

otkrito.lv

trikoto.de

DNS History

21 records (10 active, 11 former)

○NSbuy.internettraffic.com2015-08-19 → 2016-03-30 · 5 obs

○ 2007-12-02 12:24:02
● 2015-08-19 01:29:58
● 2016-03-30 17:18:12
○ 2018-10-09 04:46:16
○ 2026-07-13 15:18:16

●NSns-1271.awsdns-30.org2026-02-18 → 2026-07-13 · 3 obs

○ 2018-10-09 04:46:16
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●NSns-1765.awsdns-28.co.uk2026-02-18 → 2026-07-13 · 3 obs

○ 2018-10-09 04:46:16
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●NSns-452.awsdns-56.com2026-02-18 → 2026-07-13 · 3 obs

○ 2018-10-09 04:46:16
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●NSns-597.awsdns-10.net2026-02-18 → 2026-07-13 · 3 obs

○ 2018-10-09 04:46:16
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

○NSns1.uniregistrymarket.link2018-10-09 → 2018-10-09 · 4 obs

○ 2016-03-30 17:18:12
● 2018-10-09 04:46:16
○ 2026-02-18 10:12:38
○ 2026-07-13 15:18:16

○NSns2.uniregistrymarket.link2018-10-09 → 2018-10-09 · 4 obs

○ 2016-03-30 17:18:12
● 2018-10-09 04:46:16
○ 2026-02-18 10:12:38
○ 2026-07-13 15:18:16

○NSns21.worldnic.com2007-12-02 → 2007-12-02 · 3 obs

● 2007-12-02 12:24:02
○ 2015-08-19 01:29:58
○ 2026-07-13 15:18:16

○NSns22.worldnic.com2007-12-02 → 2007-12-02 · 3 obs

● 2007-12-02 12:24:02
○ 2015-08-19 01:29:58
○ 2026-07-13 15:18:16

○NSsell.internettraffic.com2015-08-19 → 2016-03-30 · 5 obs

○ 2007-12-02 12:24:02
● 2015-08-19 01:29:58
● 2016-03-30 17:18:12
○ 2018-10-09 04:46:16
○ 2026-07-13 15:18:16

●MXalt1.aspmx.l.google.com2026-02-18 → 2026-07-13 · 3 obs

○ 2015-08-19 01:29:58
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●MXalt2.aspmx.l.google.com2026-02-18 → 2026-07-13 · 3 obs

○ 2015-08-19 01:29:58
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●MXalt3.aspmx.l.google.com2026-02-18 → 2026-07-13 · 3 obs

○ 2015-08-19 01:29:58
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●MXalt4.aspmx.l.google.com2026-02-18 → 2026-07-13 · 3 obs

○ 2015-08-19 01:29:58
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

●MXaspmx.l.google.com2026-02-18 → 2026-07-13 · 3 obs

○ 2015-08-19 01:29:58
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

○MXmail.rootkit.org2007-12-02 → 2007-12-02 · 3 obs

● 2007-12-02 12:24:02
○ 2015-08-19 01:29:58
○ 2026-07-13 15:18:16

○A50.116.1.2252017-04-03 → 2017-04-03 · 4 obs

○ 2016-03-30 17:18:12
● 2017-04-03 19:24:28
○ 2018-10-09 04:46:16
○ 2026-07-13 15:18:16

●A52.14.138.162026-02-18 → 2026-07-13 · 3 obs

○ 2018-10-09 04:46:16
● 2026-02-18 10:12:38
● 2026-07-13 15:18:16

○A69.172.201.1532018-10-09 → 2018-10-09 · 4 obs

○ 2017-04-03 19:24:28
● 2018-10-09 04:46:16
○ 2026-02-18 10:12:38
○ 2026-07-13 15:18:16

○A69.172.201.2082015-08-19 → 2016-03-30 · 5 obs

○ 2007-12-02 12:24:02
● 2015-08-19 01:29:58
● 2016-03-30 17:18:12
○ 2017-04-03 19:24:28
○ 2026-07-13 15:18:16

○A81.228.182.2522007-12-02 → 2007-12-02 · 3 obs

● 2007-12-02 12:24:02
○ 2015-08-19 01:29:58
○ 2026-07-13 15:18:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b0.org.afilias-nst.org, b2.org.afilias-nst.org, d0.org.afilias-nst.org	-
rootkit.org	ns-1271.awsdns-30.org, ns-1765.awsdns-28.co.uk, ns-452.awsdns-56.com, ns-597.awsdns-10.net	2 records

✅ Authoritative Response

Server:205.251.193.196

NS records: ns-1271.awsdns-30.org, ns-1765.awsdns-28.co.uk, ns-452.awsdns-56.com, ns-597.awsdns-10.net

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for rootkit.org (unsigned zone)

⏱️ Timing

Total: 573ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`52.14.138.16`
NS	4	`ns-1271.awsdns-30.org, ns-1765.awsdns-28.co.uk...`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`tiktok-developers-site-verification=CX7j, v=spf1 include:_spf.google.com ~all; goo`
SOA	1	`ns-452.awsdns-56.com awsdns-hostmaster.a`

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (ns-1271.awsdns-30.org, ns-1271.awsdns-30.org)

Analysis

IP Addresses

rootkit.org has exactly one IP address — 52.14.138.16.

ec2-52-14-138-16.us-east-2.compute.amazonaws.com, for instance, is one of the other host names sharing IP numbers with rootkit.org.

Name Servers

Four name servers handle the delegation for rootkit.org: ns-452.awsdns-56.com, ns-597.awsdns-10.net, ns-1271.awsdns-30.org and ns-1765.awsdns-28.co.uk.

There is at least partial name server overlap between rootkit.org and other domains — expressofitness.net, gzodd.com, bestcanvas.com and two more among them.

All four hostnames — ns-452.awsdns-56.com, ns-597.awsdns-10.net, ns-1271.awsdns-30.org and ns-1765.awsdns-28.co.uk — resolve to two IP numbers apiece: ns-452.awsdns-56.com to 205.251.193.196 and 2600:9000:5301:c400::1; ns-597.awsdns-10.net to 205.251.194.85 and 2600:9000:5302:5500::1; ns-1271.awsdns-30.org to 205.251.196.247 and 2600:9000:5304:f700::1; ns-1765.awsdns-28.co.uk to 205.251.198.229 and 2600:9000:5306:e500::1.

Mail Servers

Five mail servers handle rootkit.org: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

At least some of the mail servers used by rootkit.org are shared with other domains: ns500671.ns500731.ns500671.ns500731.ns500731.ns500705.ns500705.ns500671.ns500291.ns500649.lustychickser.com, ns500698.ns500698.ns500698.ns500759.ns500759.ns500735.ns500735.ns500698.ns500736.ns500735.ns500735.ns500736.ns500698.ns500619.ns500576.ns500576.ns500576.trackreceptor.com, saytenstudios.com and two others among them.

These mail servers often appear in conjunction with the mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com.

Host names pointing to two IP addresses:

aspmx.l.google.com directs traffic to 142.251.163.27 and 2607:f8b0:4004:c1b::1b.

alt1.aspmx.l.google.com directs traffic to 108.177.123.26 and 2800:3f0:4003:c0f::1a.

alt2.aspmx.l.google.com directs traffic to 172.253.116.27 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com directs traffic to 192.178.223.27 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com directs traffic to 172.253.157.26 and 2a00:1450:400c:c23::1b.