CF1757765132239-tsm20250912070358

NSLIST.NET - rootkit.dk

Search for IP or hostnames:

rootkit.dk checked at 2025-09-13T12:05:32.213Z 232ms 165/165/165 100% R:12

rootkit.dk

MXaspmx2.googlemail.com
A2a00:1450:400b:c02::1a 🇮🇪 Google
PTRdj-in-f26.1e100.net
A172.253.116.27🇺🇸 Google
PTRdj-in-f27.1e100.net
MXaspmx3.googlemail.com
A2a00:1450:400c:c00::1a 🇧🇪 Google
PTRws-in-f26.1e100.net
PTRws-in-x1a.1e100.net
A173.194.76.27🇺🇸 Google
PTRws-in-f27.1e100.net
NSdiva.ns.cloudflare.com
A2606:4700:50::adf5:3a61 🇺🇸 Cloudflare
PTRdiva.ns.cloudflare.com
A2803:f800:50::6ca2:c061 🇨🇷 Cloudflare
PTRdiva.ns.cloudflare.com
A2a06:98c1:50::ac40:2061 🇺🇸 Cloudflare
PTRdiva.ns.cloudflare.com
A108.162.192.97🇺🇸 Cloudflare
PTRdiva.ns.cloudflare.com
A172.64.32.97🇺🇸 Cloudflare
PTRdiva.ns.cloudflare.com
A173.245.58.97🇺🇸 Cloudflare
PTRdiva.ns.cloudflare.com
NSfrank.ns.cloudflare.com
A2606:4700:58::adf5:3ba6 🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A2803:f800:50::6ca2:c1a6 🇨🇷 Cloudflare
PTRfrank.ns.cloudflare.com
A2a06:98c1:50::ac40:21a6 🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A108.162.193.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A172.64.33.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A173.245.59.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
MXaspmx.l.google.com
A2607:f8b0:4004:c08::1a 🇺🇸 Google
PTRbi-in-f26.1e100.net
A192.178.155.27🇺🇸 Google
PTRyuiadrs-in-f27.1e100.net
MXalt1.aspmx.l.google.com
A2a00:1450:400b:c02::1a 🇮🇪 Google
PTRdj-in-f26.1e100.net
A172.253.116.26🇺🇸 Google
PTRdj-in-f26.1e100.net
MXalt2.aspmx.l.google.com
A2a00:1450:400c:c00::1b 🇧🇪 Google
PTRws-in-f27.1e100.net
PTRws-in-x1b.1e100.net
A173.194.76.26🇺🇸 Google
PTRws-in-f26.1e100.net
A2606:4700:3035::6815:3e94 🇺🇸 Cloudflare
A2606:4700:3037::ac43:88b4 🇺🇸 Cloudflare
A104.21.62.148 Cloudflare
A172.67.136.180🇺🇸 Cloudflare

dk

NSb.nic.dk
NSc.nic.dk
NSh.nic.dk
NSl.nic.dk
NSs.nic.dk
NSt.nic.dk

Starts with same word

Starts similarily

AI analysis

rootkit.dk is configured to point to the following four IP addresses: 2606:4700:3035::6815:3e94, 2606:4700:3037::ac43:88b4, 104.21.62.148, and 172.67.136.180.

IP numbers are shared between rootkit.dk and other host names, such as 0991lyg.com, fisherjonesfamilydentistry.com, 18hairygirls.com, www.weexch666.com, and menshealth.co.id.

Two name servers, diva.ns.cloudflare.com and frank.ns.cloudflare.com, are assigned the delegation of rootkit.dk.

Other domains, such as iboi.pl, valuesec.dk, consolidated.coop, brightenergy.coop, and akol.pl, share the same name server setup as rootkit.dk.

The domain rootkit.dk shares name servers, at least partially, with other domains such as ftiria.org, lockensmartaccess.com, 1sthosting.dk, fg-express.com, and skachat-teamviewer.ru.

diva.ns.cloudflare.com and frank.ns.cloudflare.com each point to six IP numbers: 2606:4700:50::adf5:3a61, 2803:f800:50::6ca2:c061, 2a06:98c1:50::ac40:2061, 108.162.192.97, 172.64.32.97, and 173.245.58.97 for diva.ns.cloudflare.com, and 2606:4700:58::adf5:3ba6, 2803:f800:50::6ca2:c1a6, 2a06:98c1:50::ac40:21a6, 108.162.193.166, 172.64.33.166, and 173.245.59.166 for frank.ns.cloudflare.com.

The five mail servers, aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com, alt1.aspmx.l.google.com, and alt2.aspmx.l.google.com, are responsible for handling rootkit.dk.

Other domains like hefty.co, pluscred.com, dowdellpud.info, gardine.or.id, and tierruca.es share some mail servers, at least partially, with rootkit.dk.

The mail servers aspmx4.googlemail.com, aspmx5.googlemail.com, alt3.aspmx.l.google.com, and alt4.aspmx.l.google.com are commonly used in conjunction with these mail servers.

aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com, alt1.aspmx.l.google.com, and alt2.aspmx.l.google.com all point to two IP numbers each: 2a00:1450:400b:c02::1a and 172.253.116.27, 2a00:1450:400c:c00::1a and 173.194.76.27, 2607:f8b0:4004:c08::1a and 192.178.155.27, 2a00:1450:400b:c02::1a and 172.253.116.26, 2a00:1450:400c:c00::1b and 173.194.76.26 respectively.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

EMGrCEB CF johedugfp 2025-09-13