rootkits.org - dns.ninja

rootkits.org

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:de7🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::ac43:8569🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.13.231Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.133.105🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSpam.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a8a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A2803:f800:50::6ca2:c08a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRpam.ns.cloudflare.com
A2a06:98c1:50::ac40:208a🇺🇸 Cloudflare2a06:98c1:50::/45
PTRpam.ns.cloudflare.com
A108.162.192.138🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A172.64.32.138🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A173.245.58.138🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
NSsam.ns.cloudflare.com
A2606:4700:58::adf5:3b8d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsam.ns.cloudflare.com
A2803:f800:50::6ca2:c18d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsam.ns.cloudflare.com
A2a06:98c1:50::ac40:218d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsam.ns.cloudflare.com
A108.162.193.141🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsam.ns.cloudflare.com
A172.64.33.141🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsam.ns.cloudflare.com
A173.245.59.141🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsam.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.13.231, 172.67.133.105
IPv6 hints2606:4700:3031::6815:de7, 2606:4700:3035::ac43:8569
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=215, name=cloudflare-ech.com
SOApam.ns.cloudflare.comdns@cloudflare.com serial=2408467888

org

DNSSEC🔒 Signed (DS record present)
NSa0.org.afilias-nst.info ⭐ ⚠️ Not in parent delegation
NSa2.org.afilias-nst.info ⚠️ Not in parent delegation
NSb0.org.afilias-nst.org
NSb2.org.afilias-nst.org
NSc0.org.afilias-nst.info ⚠️ Not in parent delegation
NSd0.org.afilias-nst.org
SOAa0.org.afilias-nst.infohostmaster@donuts.email serial=1784258462

Same first word

rootkits.net
rootkits.org
rootkits.ru

Similar names

kortisto.com
rikstoto.no
kortisto.fi
rikstoto.co.uk
rikstoto.com
rikstoto.fi
ttoksori.com
rikstoto.dk
rootskit.com

DNS History

25 records (6 active, 19 former)

20162017201820192020202120222023202420252026NSpam.ns.cloudflare.comsam.ns.cloudflare.combuy.internettraffic.comdns1.name-services.comdns2.name-services.comdns3.name-services.comdns4.name-services.comdns5.name-services.comns1.uniregistrymarket.linkns2.uniregistrymarket.linkns45.domaincontrol.comns46.domaincontrol.comsell.internettraffic.comMXmailstore1.secureserver.netsmtp.secureserver.netA104.21.13.231172.67.133.1052606:4700:3031::6815:de72606:4700:3035::ac43:85692606:4700:3035::6815:de750.63.202.5269.172.201.15369.172.201.20898.124.198.198.124.199.1
○NSbuy.internettraffic.com2016-02-12 → 2016-06-21 · 5 obs
○ 2015-11-17 05:03:46
● 2016-02-12 13:00:02
● 2016-06-21 08:31:02
○ 2017-02-13 16:22:56
○ 2026-07-17 03:58:30
○NSdns1.name-services.com2015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○NSdns2.name-services.com2015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○NSdns3.name-services.com2015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○NSdns4.name-services.com2015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○NSdns5.name-services.com2015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○NSns1.uniregistrymarket.link2017-02-13 → 2018-09-19 · 5 obs
○ 2016-06-21 08:31:02
● 2017-02-13 16:22:56
● 2018-09-19 06:34:38
○ 2026-02-22 05:00:28
○ 2026-07-17 03:58:30
○NSns2.uniregistrymarket.link2017-02-13 → 2018-09-19 · 5 obs
○ 2016-06-21 08:31:02
● 2017-02-13 16:22:56
● 2018-09-19 06:34:38
○ 2026-02-22 05:00:28
○ 2026-07-17 03:58:30
○NSns45.domaincontrol.com2015-11-17 → 2015-11-17 · 4 obs
○ 2015-07-18 21:20:26
● 2015-11-17 05:03:46
○ 2016-02-12 13:00:02
○ 2026-07-17 03:58:30
○NSns46.domaincontrol.com2015-11-17 → 2015-11-17 · 4 obs
○ 2015-07-18 21:20:26
● 2015-11-17 05:03:46
○ 2016-02-12 13:00:02
○ 2026-07-17 03:58:30
●NSpam.ns.cloudflare.com2026-02-22 → 2026-07-17 · 3 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
● 2026-07-17 03:58:30
●NSsam.ns.cloudflare.com2026-02-22 → 2026-07-17 · 3 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
● 2026-07-17 03:58:30
○NSsell.internettraffic.com2016-02-12 → 2016-06-21 · 5 obs
○ 2015-11-17 05:03:46
● 2016-02-12 13:00:02
● 2016-06-21 08:31:02
○ 2017-02-13 16:22:56
○ 2026-07-17 03:58:30
○MXmailstore1.secureserver.net2015-11-17 → 2015-11-17 · 3 obs
● 2015-11-17 05:03:46
○ 2016-02-12 13:00:02
○ 2026-07-17 03:58:30
○MXsmtp.secureserver.net2015-11-17 → 2015-11-17 · 3 obs
● 2015-11-17 05:03:46
○ 2016-02-12 13:00:02
○ 2026-07-17 03:58:30
●A104.21.13.2312026-02-22 → 2026-07-17 · 3 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
● 2026-07-17 03:58:30
●A172.67.133.1052026-02-22 → 2026-07-17 · 3 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
● 2026-07-17 03:58:30
●A2606:4700:3031::6815:de72026-07-04 → 2026-07-17 · 3 obs
○ 2026-02-22 05:00:28
● 2026-07-04 01:42:26
● 2026-07-17 03:58:30
○A2606:4700:3035::6815:de72026-02-22 → 2026-02-22 · 4 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
○ 2026-07-04 01:42:26
○ 2026-07-17 03:58:30
●A2606:4700:3035::ac43:85692026-02-22 → 2026-07-17 · 3 obs
○ 2018-09-19 06:34:38
● 2026-02-22 05:00:28
● 2026-07-17 03:58:30
○A50.63.202.522015-11-17 → 2015-11-17 · 4 obs
○ 2015-07-18 21:20:26
● 2015-11-17 05:03:46
○ 2016-02-12 13:00:02
○ 2026-07-17 03:58:30
○A69.172.201.1532016-06-21 → 2018-09-19 · 5 obs
○ 2016-02-12 13:00:02
● 2016-06-21 08:31:02
● 2018-09-19 06:34:38
○ 2026-02-22 05:00:28
○ 2026-07-17 03:58:30
○A69.172.201.2082016-02-12 → 2016-02-12 · 4 obs
○ 2015-11-17 05:03:46
● 2016-02-12 13:00:02
○ 2016-06-21 08:31:02
○ 2026-07-17 03:58:30
○A98.124.198.12015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2015-11-17 05:03:46
○ 2026-07-17 03:58:30
○A98.124.199.12015-07-18 → 2015-07-18 · 3 obs
● 2015-07-18 21:20:26
○ 2017-02-13 16:22:56
○ 2026-07-17 03:58:30

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
orgb2.org.afilias-nst.org, d0.org.afilias-nst.org, b0.org.afilias-nst.org-
rootkits.orgpam.ns.cloudflare.com, sam.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.192.138

NS records: pam.ns.cloudflare.com, sam.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for rootkits.org (unsigned zone)

⏱️ Timing

Total: 203ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.133.105, 104.21.13.231
AAAA22606:4700:3031::6815:de7, 2606:4700:3035::ac43:8569
NS2pam.ns.cloudflare.com, sam.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1pam.ns.cloudflare.com dns.cloudflare.com

Analysis

IP Addresses

rootkits.org directs to four IP numbers, which are 104.21.13.231, 172.67.133.105, 2606:4700:3031::6815:de7 and 2606:4700:3035::ac43:8569.

cloudbet1.com, murgul.bel.tr, uniformmate.com and two other host names share IP numbers with rootkits.org.

Name Servers

rootkits.org is served by two delegated name servers, pam.ns.cloudflare.com and sam.ns.cloudflare.com.

rootkits.org uses the same name servers as several other domains — among them fondazionedipiacenzaevigevano.it, reox.org, zespia.tw and two more.

There is at least partial name server overlap between rootkits.org and other domains — airhelp.no, duetg.com, jobable.net and two more among them.

The name servers vasilii.ns.cloudflare.com, eric.ns.cloudflare.com and elsa.ns.cloudflare.com are often found in combination with these name servers.

Hostnames that resolve to 6 IP addresses:

pam.ns.cloudflare.com carries IP addresses 108.162.192.138, 172.64.32.138 and 173.245.58.138, with 3 other addresses beyond those.

sam.ns.cloudflare.com carries IP addresses 108.162.193.141, 172.64.33.141 and 173.245.59.141, with 3 other addresses beyond those.