mail.rootkit.pl - dns.ninja

`mail.rootkit.pl`

	DNSSEC	⚠️ Not signed
	A	185.253.212.22^{🇵🇱 AS48707-OPS-PL185.253.212.0/24}

`rootkit.pl`

	DNSSEC	🔒 Signed (DS record present)
	A	185.253.212.22^{🇵🇱 AS48707-OPS-PL185.253.212.0/24}
	NS	`ns1.aftermarket.pl` ⭐
	NS	`ns2.aftermarket.pl`
	MX	`blackhole.aftermarket.pl` ⭐
	TXT	`v=spf1 mx -all`
	SOA	`ns1.aftermarket.pl`kontakt@aftermarket.pl serial=2501181424

Same first word

mail.s3.amazonaws.com

mail.gov.ye

mail.com.kg

mail.nra

mail.couchpotatofries.org

mail.radio.fm

mail.od.ua

mail.ms

mail.boleslawiec.pl

mail.mydns.vc

mail.lutsk.ua

mail.kz

mail.im

mail.kaas.gg

mail.it.com

mail.gov.mg

mail.ss

mail.co

mail.tc

mail.gda.pl

mail.world

mail.pe

mail.sunnyday.jp

mail.group

mail.gov

mail.org.za

mail.mx

mail.cy

mail.supply

mail.gov.ae

mail.com.ba

mail.co.zw

mail.org

mail.pixolino.com

mail.ug

mail.ly

mail.gs

mail.bg

mail.wtf

mail.webhop.me

mail.associates

mail.al

mail.myfast.space

mail.vip

mail.red

mail.co.il

mail.pf

mail.com.mx

mail.uy

mail.gt

mail.training

mail.cd

mail.in.ua

mail.cx

mail.gm

mail.su

mail.toshiba

mail.hosting

mail.fm

mail.mil

mail.f5.si

mail.party

mail.tax

mail.coop

mail.directory

mail.freemyip.com

mail.com.tw

mail.hk.com

mail.mh

mail.gov.mw

mail.gov.bn

mail.mmafan.biz

mail.ky

mail.synology-diskstation.de

mail.schoolbus.jp

mail.uz.ua

mail.cool

mail.uk

mail.ru.com

mail.littlestar.jp

mail.com.se

mail.gov.ao

mail.me

mail.ac.gov.br

mail.edu.me

mail.gov.ru

mail.pr

mail.mlbfan.org

mail.ph

mail.nhlfan.net

mail.gru.br

mail.gl

mail.link

mail.no

mail.net.vn

mail.lib.wy.us

mail.pictures

mail.gov.kg

mail.ag

mail.hk

Similar names

mail.net.ua

lami.ch

laim.tv

mail.com.au

mial.nl

amli.net

lami.ai

mail.cat

mail.vin

amli.be

mail.stripper.jp

ailm.org

amli.se

alim.de

laim.lv

imla.farm

mail.ciao.jp

lami.eu

mail.gov.vc

mail.realm.cz

imla.ru

mial.de

mail.vu

lima.my

ilam.de

mail.center

mali.eu

mail.fi

ilma.fi

mila.im

mail.kg

alim.ws

mila.boutique

mail.mayfirst.org

mail.systems

liam.com

mail.itigo.jp

iaml.ch

mail.cl

mila.nyc

mail.vc

mail.babymilk.jp

mail.gov.by

alim.us

almi.co.at

mail.chat

mail.fastvps.host

mail.style

amil.pl

alim.kr

mail.altervista.org

mail.monster

lima.cl

mail.ngo.za

mali.co.uk

mail.awsapps.com

mail.biz

mail.gov.lv

aiml.foundation

mail.jetzt

imla.or.id

mail.kh.ua

mail.ru

mail.myeffect.net

lmia.lt

mail.myshopify.com

mail.123hjemmeside.dk

liam.at

mail.ml

mail.fo

mali.it

mail.expert

liam.wtf

mail.mil.tm

mail.team

amli.com

lima.la

mail.com.ru

mail.tn

imal.info

mail.serveftp.com

mail.by

mail.peewee.jp

mial.eu

lima.cc

mail.virtualuser.de

mail.charity

lima.uk.com

mail.exchange

aiml.online

almi.design

mail.live

imal.co.uk

lima.ir

lima.nl

mlia.net

mail.lk3.ru

amil.sucks

mila.pro

mail.com.mk

mail.ap.gov.br

iaml.at

alim.fr

mila.edu.my

mail.dp.ua

mail.myjino.ru

mlai.in

lima.cloud

iaml.ru

mail.space

mail.rr.gov.br

almi.or.id

mial.it

mail.read-books.org

lima.com.my

liam.ru

amil.business

mail.ilovecollege.info

lima.vn

mila.ie

mail.gmx

mail.info.pl

amli.cn

mail.community

mail.cleaning

liam.cn

alim.cl

mail.bh

lami.es

amil.no

mail.site

mail.select

mail.email

mail.blue

DNS History

11 records (1 active, 10 former)

○NSdns1.nano.pl2016-04-11 → 2026-02-15 · 5 obs

○ 2015-10-24 11:06:08
● 2016-04-11 23:45:52
● 2026-02-15 16:27:58
○ 2026-02-20 01:02:26
○ 2026-06-07 21:16:08

○NSdns2.nano.pl2016-04-11 → 2026-02-15 · 5 obs

○ 2015-10-24 11:06:08
● 2016-04-11 23:45:52
● 2026-02-15 16:27:58
○ 2026-02-20 01:02:26
○ 2026-06-07 21:16:08

○NSdns3.nano.pl2016-04-11 → 2026-02-15 · 5 obs

○ 2015-10-24 11:06:08
● 2016-04-11 23:45:52
● 2026-02-15 16:27:58
○ 2026-02-20 01:02:26
○ 2026-06-07 21:16:08

○NSns5.biznes-host.pl2015-06-08 → 2015-06-08 · 3 obs

● 2015-06-08 01:42:16
○ 2015-10-24 11:06:08
○ 2026-06-07 21:16:08

○NSns6.biznes-host.pl2015-06-08 → 2015-06-08 · 3 obs

● 2015-06-08 01:42:16
○ 2015-10-24 11:06:08
○ 2026-06-07 21:16:08

○MXmx.active24.pl2016-04-11 → 2026-02-15 · 4 obs

● 2016-04-11 23:45:52
● 2026-02-15 16:27:58
○ 2026-02-20 01:02:26
○ 2026-06-07 21:16:08

○A185.25.150.2442015-06-08 → 2015-06-08 · 3 obs

● 2015-06-08 01:42:16
○ 2015-10-24 11:06:08
○ 2026-06-07 21:16:08

●A185.253.212.222026-02-15 → 2026-06-07 · 3 obs

○ 2016-09-26 23:14:38
● 2026-02-15 16:27:58
● 2026-06-07 21:16:08

○A31.6.70.1432016-09-26 → 2016-09-26 · 4 obs

○ 2016-04-11 23:45:52
● 2016-09-26 23:14:38
○ 2026-02-15 16:27:58
○ 2026-06-07 21:16:08

○A89.40.119.2422016-04-11 → 2016-04-11 · 4 obs

○ 2015-10-24 11:06:08
● 2016-04-11 23:45:52
○ 2016-09-26 23:14:38
○ 2026-06-07 21:16:08

○CNAMErootkit.pl2016-04-11 → 2026-02-15 · 4 obs

● 2016-04-11 23:45:52
● 2026-02-15 16:27:58
○ 2026-02-20 01:02:26
○ 2026-06-07 21:16:08

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
pl	f-dns.pl, b-dns.pl, j-dns.pl, h-dns.pl...	12 records
rootkit.pl	ns1.aftermarket.pl, ns2.aftermarket.pl	-

✅ Authoritative Response

Server:185.253.213.10

NS records: ns1.aftermarket.pl, ns2.aftermarket.pl

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 373ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`185.253.212.22`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (f-dns.pl, f-dns.pl, b-dns.pl...)

Analysis

IP Addresses

mail.rootkit.pl has exactly one IP address — 185.253.212.22.

bizuteriaizegarki.pl, agro-strefa.pl, sgwww.www.demis.pl plus two other host names have IP numbers in common with mail.rootkit.pl.