rootkit.us - dns.ninja

`rootkit.us`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:9c66^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:4a53^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.74.83^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.156.102^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`lola.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a84^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	2803:f800:50::6ca2:c084^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lola.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2084^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lola.ns.cloudflare.com`
		A	108.162.192.132^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lola.ns.cloudflare.com`
		A	172.64.32.132^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lola.ns.cloudflare.com`
		A	173.245.58.132^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lola.ns.cloudflare.com`
NS	`woz.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b96^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`woz.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c196^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`woz.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2196^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`woz.ns.cloudflare.com`
		A	108.162.193.150^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`woz.ns.cloudflare.com`
		A	172.64.33.150^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`woz.ns.cloudflare.com`
		A	173.245.59.150^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`woz.ns.cloudflare.com`
MX	`mail.rootkit.us` ⭐
		A	57.131.5.160^{🇫🇷 OVH57.131.0.0/17}
			PTR	`srv1.skyhosting.it`
TXT	`v=spf1 include:amazonses.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.74.83, 172.67.156.102
		IPv6 hints	2606:4700:3031::ac43:9c66, 2606:4700:3033::6815:4a53
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=168, name=cloudflare-ech.com
SOA	`lola.ns.cloudflare.com`dns@cloudflare.com serial=2409267618

`us`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.cctld.us` ⭐
	NS	`b.cctld.us`
	NS	`f.cctld.us`
	NS	`k.cctld.us`
	NS	`m.cctld.us`
	NS	`n.cctld.us`
	NS	`w.cctld.us`
	NS	`x.cctld.us`
	NS	`y.cctld.us`
	SOA	`a.cctld.us`admin@tldns.godaddy serial=1786374868

Subdomains

mail.rootkit.us

Same first word

rootkit.de

rootkit.org

rootkit.hu

rootkit.me

rootkit.com.cn

rootkit.fr

rootkit.info

rootkit.finance

rootkit.dk

rootkit.ir

rootkit.nl

rootkit.es

rootkit.cc

rootkit.be

rootkit.us

rootkit.ca

rootkit.one

rootkit.ru

rootkit.com

rootkit.co

rootkit.pl

rootkit.eu

rootkit.net.cn

rootkit.it

rootkit.se

rootkit.io

Similar names

ototrik.com

ortokit.com

kitroot.com

rotokit.com

trikoot.net

otkrito.com

tortiko.ru

otkrito.ru

irottko.hu

kotrito.com

kotorit.com

trikoto.com

irottko.com

tikroot.com

triokto.de

rikotto.nl

otkrito.lv

trikoto.de

DNS History

16 records (7 active, 9 former)

○NSf1g1ns1.dnspod.net2015-06-28 → 2018-10-09 · 7 obs

● 2015-06-28 04:58:16
○ 2015-11-12 08:55:26
○ 2016-06-21 18:39:56
● 2017-02-02 14:51:50
● 2018-10-09 05:19:12
○ 2026-08-03 09:39:08
○ 2026-08-10 15:38:36

○NSf1g1ns2.dnspod.net2015-06-28 → 2018-10-09 · 6 obs

● 2015-06-28 04:58:16
○ 2015-11-12 08:55:26
○ 2016-06-21 18:39:56
● 2018-10-09 05:19:12
○ 2026-08-03 09:39:08
○ 2026-08-10 15:38:36

●NSlola.ns.cloudflare.com2026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

○NSns1.alidns.com2015-11-12 → 2016-06-21 · 5 obs

○ 2015-06-28 04:58:16
● 2015-11-12 08:55:26
● 2016-06-21 18:39:56
○ 2017-02-02 14:51:50
○ 2026-08-10 15:38:36

○NSns2.alidns.com2015-11-12 → 2016-06-21 · 5 obs

○ 2015-06-28 04:58:16
● 2015-11-12 08:55:26
● 2016-06-21 18:39:56
○ 2018-10-09 05:19:12
○ 2026-08-10 15:38:36

●NSwoz.ns.cloudflare.com2026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

●MXmail.rootkit.us2026-08-03 → 2026-08-10 · 3 obs

○ 2017-02-02 14:51:50
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

○MXmxbiz1.qq.com2015-11-12 → 2017-02-02 · 4 obs

● 2015-11-12 08:55:26
● 2017-02-02 14:51:50
○ 2026-08-03 09:39:08
○ 2026-08-10 15:38:36

○MXmxbiz2.qq.com2015-11-12 → 2017-02-02 · 4 obs

● 2015-11-12 08:55:26
● 2017-02-02 14:51:50
○ 2026-08-03 09:39:08
○ 2026-08-10 15:38:36

●A104.21.74.832026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

○A112.124.113.2292015-06-28 → 2015-11-12 · 4 obs

● 2015-06-28 04:58:16
● 2015-11-12 08:55:26
○ 2016-02-06 10:25:36
○ 2026-08-10 15:38:36

●A172.67.156.1022026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

○A207.226.141.2252017-02-02 → 2018-10-09 · 5 obs

○ 2016-06-21 18:39:56
● 2017-02-02 14:51:50
● 2018-10-09 05:19:12
○ 2026-08-03 09:39:08
○ 2026-08-10 15:38:36

●A2606:4700:3031::ac43:9c662026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

●A2606:4700:3033::6815:4a532026-08-03 → 2026-08-10 · 3 obs

○ 2018-10-09 05:19:12
● 2026-08-03 09:39:08
● 2026-08-10 15:38:36

○A47.88.29.312016-02-06 → 2016-06-21 · 5 obs

○ 2015-11-12 08:55:26
● 2016-02-06 10:25:36
● 2016-06-21 18:39:56
○ 2017-02-02 14:51:50
○ 2026-08-10 15:38:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
us	w.cctld.us, b.cctld.us, y.cctld.us, x.cctld.us...	-
rootkit.us	lola.ns.cloudflare.com, woz.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.150

NS records: lola.ns.cloudflare.com, woz.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for rootkit.us (unsigned zone)

⏱️ Timing

Total: 412ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.156.102, 104.21.74.83`
AAAA	2	`2606:4700:3031::ac43:9c66, 2606:4700:3033::6815:4a53`
NS	2	`lola.ns.cloudflare.com, woz.ns.cloudflare.com`
MX	1	`mail.rootkit.us (pri: 5)`
TXT	1	`v=spf1 include:amazonses.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`lola.ns.cloudflare.com dns.cloudflare.co`

Analysis

Hierarchy

rootkit.us is the parent zone for mail.rootkit.us.

IP Addresses

rootkit.us resolves to four IP addresses: 104.21.74.83, 172.67.156.102, 2606:4700:3031::ac43:9c66 and 2606:4700:3033::6815:4a53.

Among the host names that share IP numbers with rootkit.us are mail.maximumlots.com, cdsjkyy.com, koratindex.com and two others.

Name Servers

Two name servers handle the delegation for rootkit.us: lola.ns.cloudflare.com and woz.ns.cloudflare.com.

rootkit.us has the same name server delegation as a number of other domains, such as 45783.top, atxsec.com, thefeed.no and two more.

rootkit.us partially shares its NS delegation with several other domains, including svetigora.com, savethehuman5.com, 5911m.com and two others.

These name servers are regularly seen alongside skip.ns.cloudflare.com and fattouche.ns.cloudflare.com as name servers.

Host names resolving to 6 IP numbers:

lola.ns.cloudflare.com resolves to 108.162.192.132, 172.64.32.132 and 173.245.58.132 among others, with 3 other IP addresses in total.

woz.ns.cloudflare.com resolves to 108.162.193.150, 172.64.33.150 and 173.245.59.150 among others, with 3 other IP addresses in total.

Mail Servers

rootkit.us routes its mail through a single mail server, mail.rootkit.us.

mail.rootkit.us carries a single IP number, which is 57.131.5.160.